(Recently, ARP attacks have appeared on many campus networks. In severe cases, a large area of ??the network cannot be accessed normally, and the campus is deeply affected. Based on the characteristics of ARP attacks, H3C enterprises provide an effective anti-ARP attack management scheme. To manage ARP attacks, it is necessary to understand the types and principles of ARP spoofing attacks, so as to better prevent and prevent the harm caused by ARP attacks. 1.1 ARP attack overview 1.2 Types of ARP attacks 1.2.1 Gateway impersonation 1.2.2 Spoofing gateway 1.2.3 Spoofing end users 2 Management scheme introduction 2.1 Authentication mode 2.1.1 Overall idea 2.1.2 Anti-ARP attack management mechanism and process 2.2 DHCP monitoring Mode 2.2.1 Overall idea 2.2.2 Related technologies 2.3 Device management process 2.3.1 Establishment and aging of DHCP Snooping entries 2.3.2 ARP intrusion/intrusion detection function
ARP Attack Defense Management Solution Technical White Paper.doc)
收藏
