How to solve the problem after the LAN IP attack is disconnected, and the LAN is disconnected by an

You can change the MAC address, and sometimes you can surf the Internet. Yunye.

MAC address in the advanced key of the attributes of the network card,It seems to be the English name,The manuscript is quietly rented locally administered address,If you already have it,Modify the last two digits。 If it's automatic, then -- you copy someone else's look and then change the next few to look at it.

A special move against ARP attacks, so that you will never drop under the rain of ARP attacks.

Does your LAN drop frequently? Have you been the victim of an ARP attack? Have there ever been annoying IP conflicts? If so, or just in case, see below to teach you the tricks against ARP attacks, so that you will never drop under the rain of ARP's attacks.

What happened: First. In the local area network, there are often people who use tools such as network law enforcement officers and scissor hands to restrict other people's access to the Internet.

Second. If someone is infected with a virus in the LAN, a large number of ARP attacks will be automatically sent to the LAN.

Principle: The ARP protocol is the basis for finding IP and network cards in the Windows network. So you can't get around it.

All methods of defense against ARP attacks must be licensed under the ARP protocol. As a result, the current network tools that are okay, such as 360 security guards, can only monitor the attack information, but they can't do anything about it.

Specify the IP address of the virtual NIC as the gateway of the NIC you normally use, for example, the address of your NIC is now and the gateway is, then give the new NIC address, and then right-click the new NIC to disable. This network card must be disabled, otherwise you will go to the virtual network card when you surf the Internet, in fact, it will not work.

Open the command prompt, and then type arp -a to check that machine is sending packages, and then go over and smash his machine, and the problem will be solved, and the network will never be disconnected again.

You may have connected two routers, caused by a conflict between the dual DHCP service, shut down the DHCP service of one of the routers, or someone has a host infected with ARP virus, the solution is to find out the poisoned host, the temporary solution is to connect locally to the fixed IP address and gateway, DNS, fixed MAC cache table, the way is to enter the cmd command interface, use the rap -s command to add a static gateway MAC address.

You're using this firewall as a good integnity client

A computer on the internal network may be a Trojan on the left, and the easiest way is to get some of the computer. Or there is a conflict between the physical address of the computer's network card. Go online and find a software to change your Mac and replace your physical IP.

Double tying measures. Dual binding is a measure of IP-MAC binding on both the router and the terminal, which can have a binding effect on both sides of ARP spoofing, forging the gateway and intercepting data. This is a precautionary measure based on the principle of ARP spoofing, and it is also the most commonly used method.

It is effective against the most common ARP spoofing.

But the flaw of the double tie lies in 3 points:

1. The static binding on the terminal is easily destroyed by the ARP attack of the ascending grandson liquid level, and an ARP D command of the virus can make the static binding completely invalid.

2. Binding the IP-MAC table on the router is time-consuming and laborious, and it is a tedious maintenance work. To change the NIC or IP address, you need to reconfigure the route. For mobile computers, this binding work that needs to be carried out at any time is a huge burden of network maintenance, and it is almost impossible for network administrators to complete.

3. Double binding only makes the computers and routes at both ends of the network not receive relevant ARP information, but a large amount of ARP attack data can still be sent, and it must be transmitted in the intranet, which greatly reduces the transmission efficiency of the intranet, and there will still be problems.

Therefore, although double binding used to be the basic measure of ARP prevention, because of the limited prevention capacity and too cumbersome management, now its effect is becoming more and more limited and lead.

The immune network they said is a device dedicated to LAN security management, which can directly find the source of the attack and intercept the abnormal packet and virus attacks in the LAN, which is really good, and the landlord can go to understand it!