In the network management, the phenomenon of IP address embezzlement often occurs, not only affects the normal use of the network, at the same time, because the stolen address often has a higher privilege, it also causes a lot of economic losses and potential security risks to users. Are there any measures to minimize the occurrence of such phenomena? In order to prevent the IP address from being embezzled, the IP address can be bundled with the network card address when assigning an IP address on the proxy server side.
For dynamic allocation of IP, do a DHCP server to bind the user network card MAC address and IP address, and then set permissions according to different IP. For static IP, if you use the three-tier switch, you can in the switch on each port to do the IP address, if someone changed their IP address, then his network does not pass. We now explain an instance of a static IP address binding.
View Nic MAC address
First click on "Start" to choose "Run", and then enter the "Ipconfig/all" command, which can find their own network card address. The following figure:
After logging to the proxy server, let the network administrator bundle the static IP address of your Internet connection with the network card address of the recorded computer. The specific commands are:
Arp-s 192.168.0.4 00-eo-4c-6c-08-75
In this way, the static IP address of your Internet connection 192.168.0.4 with the network card address for 00-eo-4c-6c-08-75 computer, even if someone steals your IP address 192.168.0.4 can not access through the proxy server. It should be noted that this command only in the LAN Internet Proxy server side useful, but also if static IP address, such as the general modem dial-up Internet is a dynamic IP address does not work. Next we give a brief introduction to the function of each parameter:
Arp-s-d-a
-s--the corresponding IP address with the physical address bundle.
-d--deletes the given IP address and the binding to the physical address.
-a--Displays the IP address and the corresponding physical address by querying the ARP protocol table.
As a network management personnel, if the MAC address and IP binding can be flexible and skilled use, will create a very safe and favorable environment, can greatly reduce the security risks.