基于SNMP的IP地址盗用解决方案

Countermeasures Based on SNMP Against IP Address Usurpation

IP地址盗用一直是一个令网管人员非常头疼的问题。由于MAC地址可以修改,现在常用的IP地址与MAC地址绑定的方法,并不能有效防止IP地址的盗用;采用端口限定IP地址的方法理论上可行,但造价非常大。对上述两种解决IP地址盗用方法及SNMP的工作原理做出分析,在此基础上提出了基于SNMP的IP地址盗用解决方案。

The problem of IP address usurped is always bothering the manager of network. Because of the MAC address is easily changed, the usual method to prevent IP from being usurped by binding IP address to MAC address can＇t work effectively. To restrict IP address with port is effectively but very expensive. Those two Methods used to solve IP address usurped and the principles of SNMP are analyzed. Base on this, a new method of solving IP address usurped is given.