- 1. ARP欺骗检测工具(找出发起ARP欺骗的幕后黑手) V1.0...
- 2. ARP地址编辑器(网管工具) V1.0 绿色免费版
- 3. IP-MAC地址绑定工具 (有效防止arp欺骗攻击) V1.3 ...
- 4. 360 ARP防火墙(比较有效的ARP攻击拦截工具) V2.0.0...
- 5. 网关智能绑定精灵 (解决arp欺骗问题) V2.0 绿色版
- 6. 金山ARP防火墙 V1.3.781.50 绿色安装版
- 7. 局域网数据包收集工具(检查ARP) V1.5 绿色中文版
- 8. arp巡警(arp防火墙) V2.6 绿色版
- 9. 照片锐化和模糊处理工具Moo0 ImageSharpener v1.0...
- 10. 彩影ARP防火墙| 拦截IP冲突/Dos攻击抑制/查杀ARP等...
不使用反向ARP的帧中继配置
PVC(不允许使用反向ARP的静态映射)实现配置:
帧中继交换机配置
enable
config terminal
no cdp run
no ip domain-lookup
line console 0
no exec-t
logg syn
enable secret cisco
line vty 0 4
password cisco
login
host frame-relay
frame-relay switch
int s0/0
encapsulation frame-relay
frame-relay lmi-type ansi
frame-relay intf-type dce
clock rate 64000
frame-relay route 104 interface s0/1 401
frame-relay route 103 interface s0/2 301
no shut
int s0/1
encapsulation frame-relay
frame-relay lmi-type ansi
frame-relay intf-type dce
clock rate 64000
frame-relay route 401 interface s0/0 104
frame-relay route 403 interface s0/2 304
no shut
int s0/2
encapsulation frame-relay
frame-relay lmi-type ansi
frame-relay intf-type dce
clock rate 64000
frame-relay route 301 int s0/0 103
frame-relay route 304 int s0/1 403
no shut
R1配置:
int s0/0
encapsulation frame-relay
frame-relay lmi-type ansi
ip add 123.1.1.1 255.255.255.0
no frame-relay inverse-arp
frame-relay map ip 123.1.1.1 103 broadcast 将ip地址和dlci号做静态映射
frame-relay map ip 123.1.1.3 103 broadcast
frame-relay map ip 123.1.1.4 104 broadcast
no shut
R3配置
int s0/0
encapsulation frame-relay
frame-relay lmi-type ansi
ip add 123.1.1.3 255.255.255.0
no frame-relay inverse-arp
frame-relay map ip 123.1.1.3 301 broadcast
frame-relay map ip 123.1.1.1 301 broadcast
frame-relay map ip 123.1.1.4 304 broadcast
no shut
R4配置
int s0/1
encapsulation frame-relay
frame-relay lmi-type ansi
ip add 123.1.1.4 255.255.255.0
no frame-relay inverse-arp
frame-relay map ip 123.1.1.1 401 broadcast
frame-relay map ip 123.1.1.3 403 broadcast
frame-relay map ip 123.1.1.4 401 broadcast
no shut