IP address security management on campus network based on SNMP
Jiang Liang-hua · 2001
A usual method used to prevent IP address from using without permission on campus network is to bind IP address to MAC address of network adapter. Because the MAC address of a network adapter can be changed easily, this method can't work effectively in fact. Toward switch Ethernet network, this paper discusses a method of IP address security management based on SNMP without any assumption. A SNMP ma-nage program is used to query the switches MIB. By this way, the relation information of IP address-MAC address-switch IP address- port number can be collected dynamically. Comparing this information with port-MAC and IP-MAC relation information registered early , all abnormal MAC address and IP address will be found. If any abnormal is found, the SNMP management program will disable the corresponding switch port automatically. The method can manage IP address and MAC address effectively.