The world has a spear has a shield, since there are ip-mac binding technology, there will always be someone to try to break through this binding. In general, there are only two ways to "modify the IP Address" and "Modify the MAC address".
1. The modification of the IP address is simple, in the "local connection" inside, modify the properties of TCP/IP can be,
650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2017/06/201706231498209757135810.png " Title= "201706231498209757135810.png" alt= "201706231498209757135810.png" style= "width:600px;" width= "vspace=" 0 "border=" 0 "/>
2. Most people do not know, in fact, the computer can also modify the "MAC address." Such as:
650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2017/06/201706231498210535205202.png " Title= "201706231498210535205202.png" alt= "201706231498210535205202.png" style= "width:750px" width= "vspace=" 0 "border=" 0 "/>
3. Therefore, to prevent the client by modifying the IP address and MAC address to break through the IP-MAC binding policy, not only to the IP address outside the binding list to prohibit its Internet access, and to block out the list of MAC address, it is best to the outside of the list of MAC address do not assign IP address. This way, even if you modify the MAC address, not only the network, but also not get IP. The configuration is as follows:
650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2017/06/201706231498210771871002.png " Title= "201706231498210771871002.png" alt= "201706231498210771871002.png" style= "width:800px;" width= "vspace=" 0 "border=" 0 "/>
As shown, modifying the IP address will directly cause the client to fail the network, while modifying the MAC address gets the IP. This effectively helps prevent clients from bypassing the binding by modifying the IP and Mac. Of course, it is better to issue a corresponding administrative order, the self-modification of IP and Mac behavior to punish, so as to ensure the company's network order.
Can I manually modify my MAC address to break through IP-MAC bindings?