Shulou(Shulou.com)06/01 Report--

IP-MAC binding is a common function of many routes and gateways, which is mainly used to bind the IP address of the LAN terminal to prevent the terminal from arbitrarily modifying the IP, resulting in a conflict of IP addresses in the network and causing the network to cease fire. First, the principle of IP-MAC binding is divided into two parts: the former part, the so-called binding, is to let the MAC of this computer always obtain the same ip address or specify ip, which is very easy to do. Many routes claim to have this function known as IP-MAC binding. But there is no point in doing this step, because once the Internet terminal modifies the IP, it can still surf the Internet, and there is still IP conflict. What really strengthens the binding of the IP-MAC is the latter part, this Internet behavior management can only be done (the core switch can also do it, but the configuration is very troublesome). It is necessary to have Internet data, and use behavior management to check whether this MAC has been obtained all the time. Once the IP or IP that is not obtained is modified without authorization, the MAC will be disconnected. Or once a new unregistered terminal (computer, route or mobile phone) comes in, even if it is plugged in, it will not be able to access the Internet.

So is IP-MAC binding necessary or not? here are a few scenarios

Half-baked Amin can not surf the Internet, oops, can not surf the Internet, IP problem, to modify an IP to try, Amin modified IP can access the Internet, but such a modification will lead to the neighbor Lao Wang off the Internet. If Lao Wang also has little knowledge, then modify the IP himself, then Lili in the next room may be off the network, Lili is a novice, can only shout network management, network management change IP, good luck, change an unused IP can not access the Internet, bad luck, change an IP, change the leader off the network is possible. If only a few people arrive and return it, if there are many people, it will simply add fuel to the busy work of the network manager. Therefore, IP-MAC binding can stop those guys who think that modifying an ip will solve the Internet problem, making IP more orderly.

There is also a general scene of the workshop, or large office environment, hands-on ability is very strong, take a small wireless route, casually plug into a switch or route. Set up a small wireless, so that mobile phones or PAD can rub against the network, or mobile workers privately connect their computers to the switch route. This behavior is a selfish act, but it is actually a more dangerous one. Privately pick up an Internet terminal to come in, if the Internet computer or mobile phone a "poison machine" will easily infect the entire local area network. Once the "poison machine" enters the local area network and causes infection, even if there is a professional hardware firewall, it is only a decoration. IP-MAC binding doesn't necessarily add much points to security, but such a small detail is kept, easy to configure and prevent problems before it happens.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.