ARP virus protection

[Langward]

Hi all,

ARP protocol is in the data link layer of network communication protocol, which completes the IP addresses to physical addresses (ie MAC address) of the conversion function. Binding feature uses ARP to help ARP protocol is in the data link layer of network communication protocol, which completes the IP addresses to physical addresses (ie MAC address) of the conversion function. The ARP virus is through forged IP address and MAC address of ARP deception to achieve, resulting in data packets can not be made up to the correct MAC address will be in the network produce large amounts of ARP traffic on the network congestion. So i want to know the how to prevent ARP virus. Please suggest.

[Zachary]

The ARP virus is through forged IP address and MAC address of ARP deception to achieve, resulting in data packets can not be made up to the correct MAC address will be in the network produce large amounts of ARP traffic on the network congestion, resulting in the communication network can not be normal. In the ARP main symptoms of the virus, the machine can be normal before the Internet, the phenomenon of sudden can not access to the Internet (can not ping the gateway pass), restart the machine or in the MS-DOS window, run the command "arp-d" after the one hand resumption of the Internet for some time. Some cases can be the Internet, but the speed unresponsive. All the best.

[Snake08]

ARP spoofing is currently with the software "QQ Sixth Sense", "network magistrates", "P2P Terminator," "Internet cafes legend killer" and so on, the software, some are man-made manual operation to destroy the network, and some as a virus or Trojan appears, the user may not know it exists, this should not be overlooked ARP lethal virus. In effect, the way unobstructed view of network connectivity, ARP deception, there are two attack possibilities, one is the router ARP table to deceive; the other is the internal network computer ARP table of deception, of course, may be two kinds of attacks on the same time. Does not manage how, after the occurrence of fraud, computer and the data sent between the router was sent to the wrong MAC address. Resulting in the occurrence of the above symptoms.

[Spyrus]

ARP binding is an effective way to prevent ARP spoofing is to the corresponding IP address and MAC address binding to avoid ARP cheating. ARP deception in the form of deception to deceive the router ARP table and ARP two kinds of computers, so there are router MAC address binding ARP table ARP table binding and binding on the computer. Two aspects of settings are required, or, if you just set the router to prevent ARP spoofing but does not set the computer, the computer will not be deceived after the data packets sent to the router, but rather sent to a wrong place, of course, had no Internet access, and access routers. All the best.

[Milton.J]

ARP to bind must first be established before the network is functioning, and then set the ARP binding. The setting is as follows: By default, ARP binding feature is turned off, first of all want to enable ARP binding function, open the router's management interface, select the "MAC address binding." Became popular interface will be shown, hook the "Enable ARP binding", click "Save." Check and reply.

[Steve123]

For static ARP mapping table, you can modify, delete, cancel bind such an operation. Click the entry to the right of "Edit" can be the purpose of amending the IP address, MAC address and binding status, "delete" to delete the entry. You can click the "Cancel all bound," the ARP table entries for all bindings suspended, when needed, when click on "Bind all entries" can be re-bind these entries. When you do not need this static ARP table when click on "delete all entries" Delete the entire ARP table. All the best.