Cracking of IP and MAC binding

Our school recently bound MAC and IP addresses, and imposed Internet access time restrictions on the server (Win2K, I think I am a person who is never restricted. How can I just stick to it like this! The old saying goes, "there are policies and countermeasures." Then I will take it out and do what I say.

The principle is as follows:

MAC and IP are bound to the server. What is the scope of the application? Of course, it is only on the server to the client. But if I modify the IP address on the client, what about the server? If you have already thought of this, you have already cracked the binding theory.

The procedure is as follows:

1. First, check the IP address range and the restricted IP address range. If the IP address is 172.16.xxx.xxx and the MAC address is 52-54-AB-12-34-56, so the IP address range should be in 172.16.0.1 -- 172.16.255.255. I don't think it is possible to end all of them; otherwise, you will have to wait for the die.

2. Perform a complete scan of 172.16.0.1 -- 172.16.255.255 to avoid unnecessary troubles (IP conflict) and network management.

3. Find the IP address that no one is using, and search for it from 172.16.255.255 to 172.16.0.1, because the general network management is used from 172.16.0.1, and the following is generally unavailable. The breakthrough is here.

4. Choose "Network Neighbor"> "property"> "TCP/IP attribute" to fix the IP address you just obtained. For details about "95/98/ME", see Step 2. 2 K. XP. Open IE and try again, and then on the INTERNET.

5. If the IP address is changed on the 95/98/ME system, a prompt will be prompted to restart the server to prevent the server from installing the recovery card or similar products from restarting, choose my computer> Properties> Nic> disable and then enable it (you need to wait a moment). Click OK. Now you can open IE and try again.

This completes the cracking

Solution:

When managing agent service software such as ISA, VLAN Division is the safest option, but the switch must support it.

If you are interested or have other opinions, we are very welcome.