Abstract: Aiming at the deceive attack of ARP protocol in campus network, this paper proposes an active protection scheme. It analyses method and principle of ARP attack and realizes the location of attack with ID authentication system and active protection force to isolate users. Application result shows that the scheme can be against most ARP attack, reduce the difficulty of network management and decrease the level of network running.

Key words: Address Resolution Protocol(ARP), Simple Network Management Protocol(SNMP), Telnet protocol, Radius service

摘要： 针对校园网中频繁发作的ARP协议欺骗攻击，提出一种主动防护方案。通过对ARP攻击的原理和方法进行分析，实现与校园网身份认证系统联动实时定位主机攻击、强制对接入用户隔离的主动防护。实践结果表明，该方案通用性强，可有效抵御多数ARP攻击，降低网络管理难度，提高网络运行水平。

关键词: 地址解析协议, 简单网络管理协议, Telnet协议, Radius服务

CLC Number: 

• TP309.2