manualshive.com logo in svg

UTT HiPER 811, Быстрое руководство

Поделиться
Скачать
UTT HiPER 811 Скачать руководство пользователя страница 36

 

Page  31 

3.5 

ARP Spoofing Defense 

Click

  Start  >  ARP  Spoofing  Defense

，

it  will  jump  to 

Security    >  ARP  Spoofing 

Defense

 page. This page lets you setup ARP Spoofing Defense to protect the device 

and your LAN hosts. 

3.5.1  ARP Spoofing Defense Setup 

 

Figure 3-13 ARP Spoofing Defense 

 

Restrict ARP Update:

 Select this check box to disable the gratuitous ARP packets 

learning function, so the device will discard gratuitous ARP packets directly. This 
function will effectively protect the device against ARP spoofing attack. 

 

Enable ARP Broadcast:

 Select this check box to enable the device to periodically 

broadcast gratuitous ARP packets, it will inform your LAN hosts the correct MAC 
address of the device’s LAN interface. This function will effectively protect your LAN 
hosts against ARP spoofing attack. 

 

Interval: 

Specify the interval between Gratuitous ARP packets (how often you want 

the packets to be broadcast). It should be a multiple of 10 between 100 and 5000 
(milliseconds).

 

3.5.2  Dynamic ARP Table 

 

Click 

Scan  LAN

 button (see Figure 3-14), it will automatically detect active hosts 

connected to the device, learn and display dynamic ARP information (IP and MAC 
address entries). 

Содержание HiPER 811

Страница 1: ...HiPER 811 Quick Guide 2009 3 17 Version 1 2 ...

Страница 2: ...ny language without written permission from the copyright holders The scope of delivery and other details are subject to change without prior notice Trademark UTT is a registered trademark of Shanghai UTT Technologies Co Ltd HiPER is a registered trademark of Shanghai UTT Technologies Co Ltd Other trademarks and registered trademarks of products mentioned in this publication may be the properties ...

Страница 3: ...ll not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the eq...

Страница 4: ... Physical Installation 8 2 1 Front Panel 8 2 1 1 LEDs 8 2 1 2 Ports 9 2 1 3 Reset Button 9 2 2 Connecting the Device 11 Chapter 3 Quick Setup Guide 12 3 1 Configure PC 12 3 2 Login the Device 14 3 3 Internet Connection 17 3 3 1 Internet Connection Setup 17 3 3 1 1 PPPoE Connection 19 3 3 1 2 Static IP Connection 22 3 3 1 3 DHCP Connection 23 3 3 2 Internet Connection List 24 3 3 3 How to Dial and ...

Страница 5: ...P Spoofing Defense 31 3 5 1 ARP Spoofing Defense Setup 31 3 5 2 Dynamic ARP Table 31 3 5 3 How to Defense Against ARP Spoofing Attack 32 3 6 Port Forwarding 33 3 6 1 Port Forwarding Setup 33 3 6 2 Port Forwarding Rule List 34 3 7 Change Administrator s Password 35 3 8 Remote Management 36 Appendix Contact Information 37 ...

Страница 6: ...ans the menu path to open some configuration page E g System admin Time means that in web interface first click level one menu system admin then click level two menu Time to open clock management page 0 1 2 Common Button Following common action buttons are used in this doc Save and apply current settings Cancel current settings and recover to the previous saved settings Refresh the information on ...

Страница 7: ...dit and delete configuration item Let us take DHCP Static Binding List see Table 0 1 as an example to explain the functions Table 0 1 DHCP Static Binding List Current page number total pages the example means the current page is first page and total one page Go to the first page Go to the previous page Go to the next page Go to the last page Enter page number in text field then click Go to or type...

Страница 8: ...o DHCP static binding entries have been set up and the maximum configurable entries number is 53 Click to open corresponding edit page Select it to select all the entries in current page Else unselect all the entries First select some entry s by selecting the leftmost check box and then click it to delete the selected entry s 0 1 3 2 Read only List Read only list is used to display the system stat...

Страница 9: ...he list sorts the data by clicked column The first click makes it sorted descendingly And the secondary click makes it sorted ascendingly The third one is descending again and so forth Each sorting will make the list display the first page 0 2 Factory Default Settings 1 The following table provides the factory default settings of Interfaces Interface IP Address Subnet Mask LAN 192 168 16 1 255 255...

Страница 10: ...and hybrid mode Internet connection type PPPoE Static IP and DHCP Supports Express Forwarding excellent performance Built in firewall Defense against ARP spoofing DoS DDoS attack port scanning Worm Blaster Worm Sasser etc Supports NAT port forwarding DMS host Supports NAT ALG ICMP FTP GRE PPTP ESP ALG etc Supports NAT sessions limit for each internal host Supports bandwidth limit for each internal...

Страница 11: ...AN Supports UPnP Supports port mirror Supports MAC address clone Supports static route dynamic route protocol RIP I and RIP II Supports NAT traversal of IPSec PPTP and L2TP Provides Web user interface Command line interface Telnet Remote management via Web or CLI Supports SYSLOG SNMP v1 and v2c Configuration file backup and restore Firmware upgrade via TFTP or Web Multi level administration privil...

Страница 12: ...o IEEE 802 3 Ethernet and IEEE 802 3u Fast Ethernet standards Supports TCP IP PPPoE DHCP ICMP NAT Static Route RIPI II SNMP MIB II etc Supports 4 port LAN switch a WAN port and a reset button Supports Auto negotiation for 10 100Mbps and duplex mode for each physical port Supports Auto MDI MDI X for each physical port Provides status LEDs Environment Operating Temperature 32ºF to 104ºF 0ºC to 40ºC ...

Страница 13: ...EDs The LEDs give real time information of system status The following table provides description of the LEDs status and their meaning LED Status Description PWR Green The Device is powered on Off The Device is powered off SYS Blinking When system is working well the status light will blink twice per second and it will blink slower under heavy load Off or Green Ever on or ever off means system is ...

Страница 14: ...ciated port is connected at 10Mbps Table2 1 LEDs Description 2 1 2 Ports Interface Description LAN 1 2 3 4 These Ethernet ports connect the Device to wired computers hubs switches and other Ethernet network devices WAN This port connects to a cable or DSL modem or other Ethernet network device Table2 2 Ports Description 2 1 3 Reset Button If you want to reset the Device to the factory default sett...

Страница 15: ...Page 10 1 The reset operation will clear all the settings and preferences that you have configured 2 You can also reset the Device to the factory defaults on the System Admin Backup Restore page ...

Страница 16: ...ds dry Step 1 Power off your PC s Cable DSL modem and the Device Step 2 Connect the PC s and the Switches or Hubs on your LAN to the Device s LAN port see Figure 2 2 Step 3 Connect the Cable DSL modem to the Device s WAN port see Figure 2 2 Step 4 Connect the power cord to the power connector on the back panel of the Switch Then plug the other end of the power cord to a grounded three prong AC pow...

Страница 17: ...p IP settings for your PC You can setup manually or configure the PC to obtain an IP address automatically Setup manually Your PC s IP address should be within the range from 192 168 16 2 to 192 168 16 254 the default gateway should be 192 168 16 1 LAN interface s IP address and the DNS server should be provided by your ISP Setup automatically In the Internet Protocol TCP IP Properties screen sele...

Страница 18: ...steps below 1 Is the connection between your PC and the Route correct The LEDs of LAN port which links to the device and the LED on your PC s adapter should be lit 2 Is the TCP IP configuration for your PC correct If the Device s IP address is 192 168 16 1 your PC s IP address should be within the range from 192 168 16 2 to 192 168 16 254 the gateway should be 192 168 16 1 ...

Страница 19: ...tility launch your web browser and enter the Device s default IP address 192 168 16 1 in the RUL filed see Figure 3 1 Then press the Enter key Figure 3 1 Address Bar A login screen prompts you for your User name and Password Enter Default case sensitive in the User name field and keep the Password field empty see Figure 3 2 Then click OK Figure 3 2 Login Screen ...

Страница 20: ...page see Figure 3 3 Figure 3 3 Homepage Note If you have not setup the Internet connection yet the system will push a prompt dialog box as below Model and Version Start Menu Click to Restart the Device Click to jump to the related page Level One Menu ...

Страница 21: ... you can do common settings through the Start menu see Figure 3 5 which including Internet Connection Network Security Port Forwarding Rule ARP Spoofing Defense User Personal Policy User Group Policy Firewall Policy and System Info Figure 3 5 Start Menu ...

Страница 22: ...access Internet 3 3 1 Internet Connection Setup At first please click the Default hyperlink of the connection entry in the Internet Connection List see Figure 3 6 Then select Connection Type provide by your ISP Connection Name The connection name is Default which is reserved by system You can t modify it Physical Interface The Default connection is bound to the WAN interface you can t modify it Co...

Страница 23: ...lly assigns an IP address select DHCP Most cable modem subscribers use this connection type Figure 3 6 Select Connection Type Depending on which connection type you select you will see various settings We will describe the settings for each connection type respectively see chapter 3 3 1 1 3 3 1 2 and 3 3 1 3 Select Type Click Default ...

Страница 24: ... 1 1 PPPoE Connection If you choose PPPoE connection type you will see the following page Figure 3 7 PPPoE Connection Setup User Name and Password Enter the PPPoE login user name and password provided by your ISP ...

Страница 25: ... Service Name if provided by your ISP MRU The MRU Maximum Receive Unit setting specifies the largest packet size permitted for network receive In most cases keep the default value 1492 When dialing the Device will automatically negotiate it with the peer device Dial Type Select type of dial connection from this drop down box available options Always On Manual and On Demand Always On If you want th...

Страница 26: ...is determines how long the Device keeps the Internet connection active after no Internet activity If you set the value to zero the Device will not terminate it Session Timeout This determines how long the Device keeps the Internet connection active since connected If you set the value to zero the Device will not disconnect it Priority It specifies the routing priority for connected connection When...

Страница 27: ... LAN interface WAN IP Address Enter the IP address for the Device s WAN interface which is provided by your ISP WAN Subnet Mask Enter the subnet mask for the Device s WAN interface which is provided by your ISP Default Gateway Enter the IP address for the default gateway which is provided by your ISP Primary DNS Server Enter the IP address of your ISP s primary DNS server Secondary DNS Server Ente...

Страница 28: ...MAC Address This field displays the current MAC address of the WAN interface In most cases you need not change it But when using DHCP connection type your ISP may only allow one MAC address to be registered To bypass this restriction you should enter the registered MAC address that is stored by your ISP Primary DNS Server Enter the IP address of your ISP s primary DNS server Secondary DNS Server E...

Страница 29: ...3 1 Internet Connection List Table 3 1 Internet Connection List continued Name It displays the connection s name Interface It displays the name of the physical interface to which the connection is bound Connection Type It displays the connection s type In the case of PPPoE type it will also display the user name Connection Status It displays current status of the connection We will describe each c...

Страница 30: ...r has hanged up Disconnected PPPoE session has terminated waiting for dialing up Internal Error Undefined status Table 3 2 Description of Connection Status PPPoE 2 Static IP Connection Status There are three kinds of status for Static IP connection see Table 3 3 Status Description Closed The physical interface is inactive Connected The connection is established between the local and peer devices I...

Страница 31: ...nection during the refresh interval IP Address Subnet Mask and Default Gateway They display the IP settings status of the Device as seen by the external users of the Internet If your connection type is PPPoE or DHCP it will show the information currently being used which received from your ISP s PPPoE or DHCP server If your connection type is Static IP the information will be the same as your inpu...

Страница 32: ...hen you click the Default hyperlink of the connection entry the Renew Release and Refresh buttons will show below the list see Table 3 6 Click Renew button to re acquire an IP address from the ISP s DHCP server Click Release button to release the IP address obtained from the ISP s DHCP server Click Refresh button to view current status of the connection Table 3 6 Internet Connection List DHCP Conn...

Страница 33: ...ection settings Step 3 Click Apply button to save and apply your settings 3 3 6 How to Delete the Connection If you want to delete the connection do the following Step 1 In the Internet Connection List click the Default hyperlink of the connection entry the related information will display in the setup fields Step 2 In the Connection Type radio boxes select none See Figure 3 10 Step 3 Click Apply ...

Страница 34: ...see Figure 3 11 you can do basic security settings to effectively defense ARP spoofing attack Dos and DDoS attack and popular virus attack e g Worm Blaster and Worm Sasser It will make your network robust and security Figure 3 11 Virus Defense Enable ARP Spoofing Defense To protect the Device against ARP spoofing attack effectively select this check box and then bind all IP MAC address pairs of th...

Страница 35: ...ect Enable Auto IP MAC Binding If you want to manually bind IP and MAC address pairs please go to Security ARP Spoofing Defense page to setup see chapter 3 5 2 3 4 2 Rate Limit In this section you can specify a bandwidth limit for each LAN host This function lets you allocate bandwidth equally to avoid few hosts occupying too much bandwidth Figure 3 12 Rate Limit Max Rx Rate for each LAN Host Sele...

Страница 36: ...e against ARP spoofing attack Enable ARP Broadcast Select this check box to enable the device to periodically broadcast gratuitous ARP packets it will inform your LAN hosts the correct MAC address of the device s LAN interface This function will effectively protect your LAN hosts against ARP spoofing attack Interval Specify the interval between Gratuitous ARP packets how often you want the packets...

Страница 37: ...MAC addresses indicate that potential ARP spoofing attack existing in your LAN and repeated IP addresses indicate that potential IP spoofing attack or IP address conflicting existing in it 3 5 3 How to Defense Against ARP Spoofing Attack To defense against ARP Spoofing Attack do the following Step 1 Select both Restrict ARP Update and Enable ARP Broadcast check boxes Step 2 Turn on all of the host...

Страница 38: ... 192 168 16 12 3 6 1 Port Forwarding Setup Figure 3 15 Port Forwarding Setup Rule Name Enter a name It should be between 1 and 11 characters long Protocol Select the protocol which it uses available options TCP UDP and GRE Start External Port Enter the lowest port number which the Device provides for outside users to access Internal IP Enter the IP address of the local server that you want outside...

Страница 39: ... Rule List Table 3 7 Port Forwarding Rule List Add a Port Forwarding Rule If you want to add a port forwarding rule select Add radio box and then setup it last click Apply button View Port Forwarding Rules When you have created some port forwarding rules you can view them in the Port Forwarding Rule List Edit a Port Forwarding Rule If you want to modify a port forwarding rule you have created clic...

Страница 40: ...s the Device with the user name Default If you want to change the password go to System Administrator page do the following setup see Figure 3 16 Step 1 Click the Default or Edit hyperlink of the default administrator s entry in the Administrator List the related information will display in the setup fields Step 2 Then modify the password in the setup fields Step 3 Click Apply button to save and a...

Страница 41: ...and the port number For example if WAN IP address is 218 21 31 3 and the port number is 8081 enter in your browser http 218 21 31 3 8081 Port Enter the port number for HTTP remote management The default value is 8081 SNMP Select this check box to allow SNMP remote management via Internet TELNET Select this check box to allow TELENET remote management via Internet Note To ensure security it is stro...

Страница 42: ...n or operation of this Device contact UTT Technical Support at one of the phone numbers or Internet addresses below Technical Support 86 4006 781 781 E mail support utt com cn Official Website http www utt com cn Official BBS http www utt com cn bbs Fax 86 21 52655269 ...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды