Please ensure your question is specific...To enhance the quality of assistance, consider refining your query by providing more details about your issue and specifying the relevant information about your device. Alternatively, for personalized assistance, you can contact our support agents.Thank you for contacting us.Sorry, but we couldn't complete your request in time. It seems like the connection timed out or the server is busy. Please try reloading the chatbot.Skip to main content
In this example, we will use Anti-ARP Scan to prevent attackers from identifying all network devices in the local area network. ARP Scanning is a method by which attackers send multiple ARP request packets in a very short period of time to flood across the entire broadcast domain.
Go to Advance Application > Anti-Arpscan > Configure. Check the Active box and configure the uplink port (port 24) as “Trusted”. Click Apply.
-Optional-
Go to Advance Application > Errdisable > Errdisable Recovery. Check the Active box and activate anti-arpscan. Click Apply.
2. Test the Result
Download and install an IP Scanning software into Host-A and Host-C.
Connect Host-A and Host-B via the Wireless Access
Host-A should initiate a scan for IP address 192.168.1.1 to 192.168.1.20.
Host-A should no longer be able to reach the USG
Access the Switch’s Web GUI. Go to Advance Application > Anti-Arpscan > Host Status. An entry for Host-A should appear with an “Err-Disable”
Host-B should still be able to reach the USG
Connect Host-C to the USG
Host-C should perform a quick scan for IP address 168.1.1 to 192.168.1.100.
Host-C should no longer be able to reach the
Access the Switch’s Web GUI. Go to Advance Application > Anti-Arpscan. Port 2 should now be in an Err-disabled
3. What could go wrong?
If access to servers or the local gateway is no longer possible after enabling Anti-Arpscan, make sure that only ports directly connected to hosts or Wireless Access Points are “untrusted”. Ports to servers and the local gateway should be “trusted”.
If all hosts connected through a Wireless Access Point can no longer reach the local gateway, check whether the port to the Wireless Access Point has changed to the err-disable state in Advance Application > Anti-Arpscan.
If so, consider increasing the Port Threshold in Advance Application > Anti-Arpscan > Configure.
We and our partners use cookies on our site for delivering personalised content, ads and analyzing website traffic. This provides you with better browsing experience. By clicking ‘agree’ or navigating this site, you agree to the use of cookies described in our cookie policy. You can manage your cookie preferences at any time.
Zyxel periodically provides end-of-life information and migration recommendations to our valued customers.
custom
/hc/theming_assets/01J2ZZZN7PVVR88HREAMFW19F1
The Zyxel Community is an online platform dedicated to networking enthusiasts, IT professionals, and Zyxel product users.
custom
/hc/theming_assets/01J2ZZZNGB20MYAWFSNCPJ8QTF
FAQ
The Zyxel online FAQ, dedicate to the frequently asked questions.
USG FLEX L2TP Android, Nebula License Migration, NAS326 Twonky Media Server
Warranty Expiration Date:
Model Name:
The Serial Number that you provided does not correspond to a Zyxel device. To create a Support or Warranty case, please ensure you enter the correct Serial Number.
If your Serial Number is still not matching with our device records, you can proceed with initiating a web support request by completing the form below, once you have successfully registered or logged in.
Obadete se da govorite s predstavitel na uslugata.
Stremim se da otgovorim na vsichki obazhdaniya v ramkite na 3 minuti
no v natovareni vremena mozhe da ni tryabva malko poveche vreme
The query results above are limited to products sold by Zyxel Networks channel business in the EMEA region. They do not apply to other regions nor to products sold by Zyxel Communications.
You can proceed with the options below to receive further support:
Your Customer ID:
Dear Customer, your device was detected as a device purchased from an Internet Service Provider.
Please get in contact with your Internet Service Provider for Support- or Warranty services.
If you are unsure about who your ISP is, please have a look at this article: Click here to view the article!
We were unable to verify the Support and Warranty status of your device using the provided Serial Number. If you purchased your device in North America, please submit a support request to the US support team here. This portal is exclusively for products and services sold in the EMEA region.
Please attach an invoice of your defective device(s) as proof of purchase.
Dear Zyxel Customer,
We are currently experiencing issues with the Serial Number check, which may result in a timeout. Please try again later. In the meantime, you can sign in or continue using the options below without entering a Serial Number.
Thank you for your understanding.
Comments
0 commentsPlease sign in to leave a comment.