The client configures ARP binding to prevent ARP gateway spoofing

The sudden and inexplicable inability to access the Internet in the local area network is often caused by the ARP problem, in which ARP gateway spoofing accounts for the majority. The fundamental way to solve this problem is to manually bind the gateway arp on the host.

Prepare for

1. Identify the gateways IP and MAC that need to perform binding

Arp-d

Ping Gateway address

Arp-a gateway address

two。 Determine which network card needs to be bound.

Netsh interface ipv4 show interface | find "Nic name"

The first number of the output line is the serial number of the network card

The name of the network card in the command needs to be determined in the network management interface, which is usually "local connection" or "Loacl Area Connection".

Start binding

I. under the XP system

1. Single network card situation

Arp-s IP MAC

two。 Situation of multiple network cards

Arp-s IP MAC network card IP

This method fails after restart and needs to be executed each time it is booted (add batch to start-> start)

II. Under the win7 system

Method 1:

The following command reboot fails, which needs to be executed each time you boot.

Netsh interface ipv4 set neighbors network card serial number "IP"MAC" store=active

Method 2:

The following order is in effect forever

Netsh-c "I I" add neighbors network card serial number "IP"MAC"

Unbind

Netsh interface ipv4 reset