锐捷三层交换机上防范ARP欺骗攻击的解决方案  

Solution for Problem of A ARP Spoofing Attacks by Using Ruijie Layer 3 Switch

作　　者：郭红芳[1] 

机构地区：[1]华南师范大学网络中心,广东广州510631

出　　处：《信息安全与通信保密》2009年第5期92-94,共3页Information Security and Communications Privacy

摘　　要：由于ARP协议的设计缺陷,存在ARP欺骗攻击的安全漏洞,最近,ARP病毒攻击在校园网大面积爆发,严重影响了校园网的正常使用,给网络维护管理带来了很大的压力。文章从ARP的工作机制和欺骗原理出发,结合锐捷三层交换机功能,介绍了检测ARP欺骗技术和实施实例,实现了VLAN网内针对arp攻击的快速解决方案。Due to some design flaws in ARP protocol, the ethernet is vulnerable to the ARP spoofing attack. Recently, the ARP virus attack is breaking out in a large scale in the campus network, seriously affects the regular operation of the campus network, and brings much pressure to the maintenance and control of the network. This paper proposes the principles of the ARP protocol,the theory of ARP spoofing attack, the tactics to detect ARP spoofing attack,and finally proposes a quick solution for the problem of defend ARP spoofing attack in the VLAN by using Ruijie Layer-3 switch.

关 键 词：ARP欺骗 攻击 锐捷交换机 VLAN 网络安全 

分 类 号：TP393.18[自动化与计算机技术—计算机应用技术]