Shulou(Shulou.com)06/01 Report--

IP address collision is a common problem in network management. Especially in the enterprise local area network, due to the existence of control policies, there will always be people trying to circumvent control by modifying IP addresses to obtain more Internet access rights and higher bandwidth. Once the modified IP conflicts with the IP sent by the company's server, it will directly affect the normal operation of the office and business. The hazards of IP conflicts are as follows:

Bypass the control of behavior management policies and flow control policies.

Causes the conflicted client to disconnect.

IP conflicts with servers will affect the normal operation of the business.

It is difficult to locate, which makes network management chaotic and disorderly.

This article describes several common "IP address conflict resolutions" and how to resolve IP conflicts when they occur.

Option I. It is forbidden to modify IP without permission.

Do not open administrator privileges to clients, and use group policy to prohibit IP modification. This fundamentally eliminates the phenomenon of IP modification. As shown in the figure:

1. Use the domain's group policy to prohibit IP modification

2. Instead of a domain environment, you can set group policy for each computer.

Option II. IP-MAC binding

Configuring IP-MAC binding on computers in a local area network can bring many benefits:

Prevent unauthorized IP modification. After binding, modifying IP without permission will break the network instead. This eliminates the incentive to modify IP.

After binding, all clients are equal to fixed IP. Internet records and behavior management strategies can be implemented to individuals, making it easier to manage.

IP-MAC binding can be done on both gateways and switches. The following figure shows the IP-MAC bindings configured on the WSG gateway:

On a manageable switch, IP-MAC binding can also be achieved by binding the IP and MAC addresses of the ports through commands. As shown in the figure:

3. What if there is an IP address conflict?

IP address conflicts are a headache, and some people cause conflicts without knowing it. In this case, network management personnel need to have effective technical means to find. For example,"Network Health Detection Plug-in" in WFilter. You can detect the MAC address of the IP collision with one click, and then you can further process the MAC address. As shown in the figure:

You can cut him off directly and give him relevant hints:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.