Wireless router WAN port anti ARP attack, looking for a master!! 50

The most fundamental solution to prevent ARP attacks is to set up static ARP tables.

Set the IP address to be bound to the MAC address on the router side, and set up a static route table on the access computer side, so that the fewer computers connected to the route, the simpler, the easier.

From the perspective of a complex network, it is not very useful to install antiARP on your computer, and the packets you send may not be able to reach the right place in the case of an ARP attack, because the ARP table of another address will not be able to receive the data you want to send to him.

Kingsoft Shell ARP Firewall.

4.Intercept external ARP attacks: Intercept external ARP attack packets at the system kernel layer to prevent the local device from being infected with viruses and Trojans from becoming the source of attacks.

5.Security mode: does not respond to ARP requests sent by machines other than the gateway to achieve stealth and avoid ARP attacks.

6.Trojan Horse Detection: Integrate the "Shell Trojan Kill" function to protect your computer from Trojan viruses.

Halo Find the host of the ARP attack to see if it's a virus or network management software It's not easy to do.

Toxic and poisonous, not poisonous and murderous.

How do you want to prevent ARP? If you want to prevent it thoroughly, you have to use an immune wall, and the most thorough defense against ARP.

When I was a network administrator, the biggest headache was ARP, which was broadcast, that is to say, I had to find a way on the VLAN (virtual LAN), and each port made a VLAN, and I had to cooperate with the switch that could be managed to do it, but you didn't have the ability to use a wireless router. Therefore, it is really unrealistic to put an end to it, and several people in our computer room have exhausted all methods (including tying IP, installing patrol police, antiarp, etc.), and finally relying on the network management switch and Tietong's strong router backing to not die routing.

What you can do:1If your unit machines are fixed, put 360 Security Guard on each machine and turn on LAN ARP defense.

2.Then change your router IP to not use the default or this common network management to reduce the possibility of being attacked.

If you set it up like this, if it is a wireless router used as a secondary router, it must be used as a wireless AP.

1. First of all, change the WAN port of the wireless router to a different network segment, the default is to wait for 1 network segment anyway, and all routers are almost 1 network segment, that is, the WAN port network segment of the wireless router should not be in the same network segment as the network segment of the above router.

2. The second is to turn off the DHCP function of the wireless router, which depends on the company, some companies are automatically obtained IP addresses and some companies are fixed IP addresses, the DHCP function of the first-level router is turned on, pay attention to the range of IP addresses must be planned, and the range of IP addresses obtained automatically must not conflict with fixed IP addresses.

However, there are many ARP attacks nowadays, and traditional measures to prevent ARP are not very effective, so you can learn about immune-strong routers.