How does a router with ARP protection be protected?

ARP attack is to achieve ARP spoofing by forging IP addresses and MAC addresses, which can generate a large amount of ARP traffic in the network to block the network, and the attacker can change the IP-MAC entry in the ARP cache of the target host as long as the attacker continuously sends out forged ARP response packets, causing network interruption or man-in-the-middle attacks.

If a person in the LAN is infected with an ARP Trojan, the system infected with the ARP Trojan will try to intercept the communication information of other computers in the network through "ARP spoofing", and thus cause communication failures of other computers in the network.

How RARP works:

1 The sending host sends a local RARP broadcast, in which it declares its MAC address and requests any RARP server that receives this request to assign an IP address;

2 After receiving the request, the RARP server on the local network segment checks its RARP list to find the IP address corresponding to the MAC address.

3 If it exists, the RARP server sends a response packet to the source host and provides this IP address to the other host.

4 If it does not exist, the RARP server does not respond to it;

5. The source host receives the response message from the RARP server and communicates with the obtained IP address. If you do not receive a response from the RARP server, the initialization fails.

6 If the ARP virus is attacked in 1-3, the response made by the server will be occupied, and the source host will not get the response information of the RARP server, and it is not that the server does not respond, but that the IP of the source host returned by the server is occupied.

It's just a two-way binding.

The IP address and MAC address are bound in both directions.

Add a password, a combination of numbers and letters to the wireless router. Pure numbers are easy to crack. Set a static IP MAC in the router to bind the virtual Qing block:

Open the router DHCP server static address assignment fill in each person's IP address and the corresponding MAC physical address, save it, and then restart the route.

On the right page, you can see some basic parameters: the SSID number can be filled in with your favorite name or not, the purpose of the modification is to facilitate the wireless device settings with other people's wireless routers to distinguish the difference between the frequency band, and modify it when there are multiple wireless routers around (generally set relative to other people's routing frequency band 3, it is not recommended to use the 13 frequency band, because some mobile phones or PDAs with WiFi function cannot identify the frequency band).

Make sure to turn on the wireless function; Turn on the security settings have been ticked (allow SSID broadcasting, it is recommended that beginners check the box to prevent themselves from forgetting the SSID number of the router and causing unnecessary trouble), and set the password;

General home network security type selection"wep", select "Auto Select" for security options;

Key format selection: "ASCII code is stupid" (16 base is more troublesome, it is difficult to remember the password);

Select a corresponding value for the key type after key 1 (128 bits is recommended);

Fill in your password in the box corresponding to the key content, and make sure that the number of characters cannot be more or less. To select a 64-bit key, you need to enter 10 hexadecimal digits or 5 ASCII characters. To select a 128-bit key, you need to enter 26 hexadecimal digits or 13 ASCII characters.

To select a 152-bit key, you need to enter 32 hexadecimal digits or 16 ASCII characters.

Make sure that the above setup steps are completed and press the "Save" button, and the wireless router part of the setup ends here.

If it's a personal computer, you can leave it on, and if it's a business, you still have to turn it on.

ARP attack is to achieve ARP spoofing by forging IP addresses and MAC addresses, which can generate a large amount of ARP traffic in the network to block the network.

If a computer in the LAN is infected with an ARP Trojan, the system infected with the ARP Trojan will try to intercept the communication information of other computers in the network through "ARP spoofing", and thus cause the communication of other computers in the network to fail.

The attacker sends a fake ARP response to computer A, telling computer A that the MAC address corresponding to the IP address of computer B is 00-aa-00-62-c6-03, and computer A believes that this correspondence is true, writes this correspondence into its own ARP cache table, and sends the data that should be sent to computer B when sending data in the future. Similarly, the attacker sends a fake ARP response to computer B, telling computer B:

The IP address of computer A corresponds to the MAC address of 00-aa-00-62-c6-03, and computer B will also send data to the attacker.