ARP欺骗和攻击问题,是企业网络的心腹大患。关于这个问题的讨论已经很深入了,对ARP攻击的机理了解的很透彻,各种防范措施也层出不穷。但问题是,现在真正摆脱ARP问题困扰了吗?从用户那里了解到,虽然尝试过各种方法,但这个问题并没有根本解决。原因就在于,目前很多种ARP防范措施,一是解决措施的防范能力有限,并不是最根本的办法。二是对网络管理约束很大,不方便不实用,不具备可操作性。三是某些措施对网络传输的效能有损失,网速变慢,带宽浪费,也不可取。 ARP spoofing and attack problems, corporate network is a serious problem. Discussions on this issue have been very thorough, understanding of the mechanism of ARP attacks is very thorough, a variety of preventive measures are also emerging. But the question is, are you really getting out of the ARP problem now? From the user’s point of view, although you have tried various methods, this problem has not been solved at all. The reason is that, at present, many kinds of ARP preventive measures, first, the preventive measures to solve the limited capacity is not the most fundamental way. Second, the network management constraints, inconvenient not practical, do not have maneuverability. Third, some measures have a loss on the efficiency of network transmission, slow speed, bandwidth waste, is not desirable.