LV switch IPPBX3000, Руководство пользователя

Страница: 176 / 195

LvSwitch IPPBX 3000 Manual
174
Item
Description
Target
Set the action of packet matching the rules:
Allowed: Allows matched packets to pass.
Prohibited: Prohibit the matching of data packets.
Protocol
Set the protocol that needs to be controlled. The value is:
TCP
UDP
All
：
This rule applies to any protocol.
Source IP
Set the source IP address of data packet that matches this rule.
When this parameter is not set by the user, this rule applies to any
source IP address.
Destination IP
Set the destination IP address of data packet that matches the rule.
When this parameter is not set by the user, this rule applies to any
destination IP address.
Time Policy
Set the effective time of the rule, select from the drop-down box.
“Always” means that it works at any time. For details on time
policy, see “Object Management> Time Group”.
Status Optional, Enable or Disable.
After the rules are successfully added, the rules are sequentially matched from top to bottom. Users can
change the order of access control rules by using the< Up >and< Down> buttons.
9.3 ARP Defense
The ARP Defense function mainly used to prevent a large number of invalid ARP request packets in the LAN
which causing the ARP entry of the device to fill up, so that the normal computer can not access the device or
the external network. This function is used in conjunction with IP / MAC binding. After this function is
enabled, the system only processes ARP packets that match the IP / MAC binding rules and directly discards
other ARP packets to prevent malicious ARP attacks. Therefore, before enabling ARP Defense, you need to
bind a valid IP / MAC address to the IP / MAC binding table first.
9.3.1IP/MAC Binding
Select “Security> ARP Defense” to enter the “IP / MAC Binding” page as shown in Figure 7-4