How to correctly use routers in Internet cafes to prevent ARP attacks

The following article describes how to correctly use routers in Internet cafes to prevent ARP attacks. I saw on the relevant website two days ago how Internet cafes correctly use routers to prevent ARP attacks, here is a detailed description of the content.

In this paper, the new generation of TP-LINK for Internet cafes Broadband Router TL-R4148 as an example to introduce, on the prevention of ARP attack the actual operation process. The following is a detailed description of the relevant content.

ARP attack: the culprit that causes transient disconnection and large-scale network disconnection. In a LAN, IP addresses (Layer 3) and Layer 2 Physical addresses (MAC addresses) are converted through ARP. Some devices in Internet cafes, such as routers and computers with TCP/IP protocols, provide ARP cache tables to speed up communication.

Currently, many attack software with ARP spoofing uses ARP to attack network devices. Forged MAC addresses correspond to IP addresses in the LAN, modify the ARP cache table of the router or computer so that the computer with a valid MAC cannot correspond to the IP address, and thus cannot access the Internet through the router.

After the router is restarted, the ARP cache table is refreshed and the network returns to normal within a short period of time. After the ARP attack is started, the network is disconnected, it is easy to be disconnected by mistake as a "dead" router, which makes it impossible for Internet cafe administrators to take timely actions to quickly resume normal operation of Internet cafes.

In this paper, the new generation of TP-LINK TL-R4148 for the special Broadband Router is introduced as an example, how to prevent ARP attacks:

If the "IP and MAC Address binding" function is available on the vro, ARP attacks can be effectively prevented. Enable binding IP and MAC addresses when the internet cafe network is normal (1 ), you can create a one-to-one correspondence between MAC and Intranet IP addresses of each computer in the internet cafe and save them to the ARP cache table (2). After that, even if an internet cafe is attacked by ARP, it cannot modify the ARP cache table. This fundamentally eliminates the impact of ARP attacks on the router and ensures normal operation of the Internet cafe.

In addition, it is easy to bind IP addresses to MAC. You do not need to enter the IP addresses and MAC addresses of your computer one by one, regardless of the size of Internet cafes, you only need to click the "bind all" button in the ARP ing table on the router management interface when the internet cafe works normally (3) to bind the IP address to the MAC address; click "import all" to save the established IP and MAC binding relationship to the system. You do not need to re-bind the IP even if you restart the system.

The above content is an introduction to how to use routers in Internet cafes to prevent ARP attacks. I hope you will gain some benefits.

 

The above content describes how to use routers in Internet cafes to prevent ARP attacks. I hope it will help you in this regard.