基于端口隔离静态IP地址冲突防范策略

Defense policy of static IP address collision based on port isolate

校园网络中不可避免会出现IP地址冲突。通过分析ARP协议,提出基于VLAN端口隔离利用二层协议重定向策略和DHCP RELAY安全绑定建立一种高效静态IP和MAC管理策略。解决在VLAN和接入交换比较多情况下IP-MAC绑定的繁杂重复工作,避免启用DHCP SERVER不能准确定位接入主机IP地址缺点。经过实验和实际应用实现了静态IP地址冲突防范。

The collision oflP address is inevitable in campus network. Through analyzing the protocol of the ARP and applying policy of redirection based on the layer two ACL, DHCP Relay security binding, an efficient policy of solution for managing static IP and MAC is established based on isolate port in vlan. It is solved that the work is hard for binding IP-MAC on the access switch, when the network has lots ofvlans and access switches, and it avoids that tracing the IP of a host is difficult for setting up a DHCP server. The defense of static IP address collision is implemented with experiment and practice application.