摘要
针对校园网中IP地址的盗用问题及其原理,根据管理需求,设计并实现了IP-MAC-PORT管理方案,通过SNMP简单网络管理协议定期对路由及交换设备进行数据采集和分析,对网络实行实时监控,追踪定位出IP盗用者的具体位置;并利用交换机支持端口管理的特性,实现了对IP盗用者的网络隔离。
To solve the problem of IP address stolen in campus network, the paper gives an idea of monitoring and managing IP addresses. The system designs and implements an IP-MAC-PORT management plan based on the law of IP stolen. By polling the routers and switches with SNMP, it can get ARP table （IP-MAC） from roarers and MAC-PORT table from switches. Therefore, by comparing IP-MAC-PORT information which comes from real-time network with the registered IP-MAC-PORT information, the system decides whether there is IP stolen. If IP stolen event occurred, then the system will find the IP stealer＇s switch port and close it. According to the test in the Chongqing University＇s campus network, the system has solved the problem of IP stolen in campus network successfully.
出处
《现代计算机》
2006年第5期35-38,42,共5页
Modern Computer
