Chapter

6

Network Security

This chapter guides you on how to protect your home network from unauthorized

users by implementing these three network security functions. You can block or allow

specific client devices to access your wireless network using MAC Filtering, or using

Access Control for wired and wireless networks, or you can prevent ARP spoofing and

ARP attacks using IP & MAC Binding.

•

MAC Filtering

•

Access Control

•

IP & MAC Binding

23

Chapter 6

Network Security

6° 1°

MAC Filtering

This function exploits the uniqueness of the MAC (Medium Access Control) address,

a unique 12-digit hexadecimal address (for example, D8:5D:4C:B4:46:EA) of every

network device, to determine if the device can or cannot access your wireless network.

Prevent unauthorized users from accessing my wireless network

by utilizing the network device’s MAC address.

For example

, I have a computer that is connected to my wireless

network. Now, an unknown device (an intruder) is also using my

wireless network, which affects my Internet speed. I would like

to control my wireless network with the following capabilities:

• My computer is always allowed to access the wireless network.

• The unknown device is not allowed to access the wireless

network.

• I don’t have to keep changing my wireless password as often.

1°

Visit

http://tplinkmodem.net

, and log in with the password

you set for the router.

2°

Go to

Advanced

>

Wireless

>

MAC Filtering

and enable

Wireless MAC Filtering

.

3°

Select the filtering rule to either block (recommended) or

allow the device(s) in the list.

To block specific device(s)

I want to:

How can I

do that?

24

Chapter 6

Network Security

1 ) Select

Block wireless access from the devices in the list

below

and click

Save

.

2 ) Select the device(s) to be blocked in the

Devices Online

table.

3 ) Click

Block

above the

Devices Online

table. The selected

devices will be added to

Devices List

automatically.

To allow specific device(s)

1 ) Select

Allow wireless access only from the devices in the

list below

and click

Save

.

2 ) Click

Add

.

3 ) Enter the

MAC Address

(You can copy and paste the

MAC Address

from

Devices Online

list if the device is

connected to your wireless network).

4 ) Enter the

Description

of the device.

5 ) Select the checkbox to enable this entry, and click

OK

.

Now MAC Filtering is implemented to protect your wireless

network.

6° 2°

Access Control

Access Control is used to block or allow specific client devices to access your network

(via wired or wireless) based on a list of blocked devices (Blacklist) or a list of allowed

devices (Whitelist).

Block or allow specific client devices to access my network (via

wired or wireless).

1°

Visit

http://tplinkmodem.net

, and log in with the password

you set for the router.

Done!

I want to:

How can I

do that?

25

Chapter 6

Network Security

2°

Go to

Advanced

>

Security

>

Access Control

and enable

Access Control.

3°

Select the access mode to either block (recommended) or

allow the device(s) in the list.

To block specific device(s)

1 ) Select

Blacklist

and click

Save

.

2 ) Select the device(s) to be blocked in the

Devices Online

table.

3 ) Click

Block

above the

Devices Online

table. The selected

devices will be added to

Devices in Blacklist

automatically.

To allow specific device(s)

1 ) Select

Whitelist

and click

Save

.

2 ) Click

Add

.

26

Chapter 6

Network Security

3 ) Enter the

Device Name

and

MAC Address

(You can copy

and paste the information from

Devices Online

table if

the device is connected to your network).

4 ) Click

OK

.

Now you can block or allow specific client devices to access your

network (via wired or wireless) using the

Blacklist

or

Whitelist

.

6° 3°

IP & MAC Binding

IP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind

network device’s IP address to its MAC address. This will prevent ARP spoofing and

other ARP attacks by denying network access to a device with matching IP address in

the Binding list, but unrecognized MAC address.

Prevent ARP spoofing and ARP attacks.

1°

Visit

http://tplinkmodem.net

, and log in with the password

you set for the router.

2°

Go to

Advanced

>

Security

>

IP & MAC Binding

and enable

IP

& MAC Binding

.

3°

Bind your device(s) according to your needs.

To bind the connected device(s)

1 ) Select the device(s) to be bound in the

ARP List

.

2 ) Click

Bind

to add to the

Binding List

.

To bind the unconnected device

Done!

I want to:

How can I

do that?