TL-SL3428_V3_User_Guide - TP-Link

The IP-MAC Binding function allows the switch to bind the IP address, MAC address, VLAN IDand the connected Port number of the Host together when the Host connects to the switch. Basingon the predefined IP-MAC Binding entries, the ARP Inspection functions to detect the ARP packetsand filter the illegal ARP packet so as to prevent the network from ARP attacks.The ARP Inspection function is implemented on the ARP Detect, ARP Defend and ARPStatistics pages.11.2.1 ARP DetectARP Detect feature enables the switch to detect the ARP packets basing on the bound entries inthe IP-MAC Binding Table and filter the illegal ARP packets, so as to prevent the network fromARP attacks, such as the Network Gateway Spoofing and Man-In-The-Middle Attack, etc.Choose the menu Network Security→ARP Inspection→ARP Detect to load the following page.Figure 11-13 ARP DetectThe following entries are displayed on this screen:‣ ARP DetectARP Detect:Enable/Disable the ARP Detect function, and click the Applybutton to apply.‣ Trusted PortTrusted Port:Select the port for which the ARP Detect function is unnecessaryas the Trusted Port. The specific ports, such as up-linked port,routing port and LAG port, should be set as Trusted Port. Toensure the normal communication of the switch, pleaseconfigure the ARP Trusted Port before enabling the ARP Detectfunction.152