TP-Link Archer A2300, User Manual

Page: 55 / 118

51
Chapter 10 Network Security
10. 1. Protect the Network from Cyber Attacks
The SPI (Stateful Packet Inspection) Firewall and DoS (Denial of Service) Protection
protect the router from cyber attacks.
The SPI Firewall can prevent cyber attacks and validate the traffic that is passing
through the router based on the protocol. This function is enabled by default, and it’s
recommended to keep the default settings.
DoS Protection can protect your home network against DoS attacks from flooding your
network with server requests. Follow the steps below to configure DoS Protection.
1. Visit http://tplinkwifi.net , and log in with your TP-Link ID or the password you set for
the router.
2. Go to Advanced > Security > Firewall & Dos Protection .
3. Enable DoS Protection .
4. Set the level ( Off , Low , Middle or High ) of protection for ICMP-FLOOD Attack
Filtering , UDP-FlOOD Attack Filtering and TCP-SYN-FLOOD Attack Filtering .
• ICMP-FLOOD Attack Filtering - Enable to prevent the ICMP (Internet Control
Message Protocol) flood attack.
• UDP-FlOOD Attack Filtering - Enable to prevent the UDP (User Datagram
Protocol) flood attack.
• TCP-SYN-FLOOD Attack Filtering - Enable to prevent the TCP-SYN (Transmission
Control Protocol-Synchronize) flood attack.
Tips:
The level of protection is based on the number of traffic packets. The protection will be triggered immediately
when the number of packets exceeds the preset threshold value (the value can be set on
Advanced > System
Tools > System Parameters > DoS Protection Level Settings ), and the vicious host will be displayed in the Blocked
DoS Host List .