This document describes how to configure IP/MAC two-way binding feature to prevent ARP spoofing attacks. The configuration steps are as follows:
1. On the UTT router, bind the IP and MAC address of each LAN PC.
2.On each LAN PC, bind the IP and MAC address of the router’s LAN interface. You can click the ¡°Export IP/MAC Binding Script” hyperlink to download the script file to a PC, and then run the file and restart the PC to bind the IP and MAC address of the router’s LAN interface. Also, you can edit a batch file by yourself, and then copy the file into the startup folder of each PC.
Note:
For Vista or Win7, you can bind IP and MAC addresses with the Netsh command, this binding is different from ARP-s, is a persistent binding, even if you restart the computer. The steps are as follows:
1.Run CMD as administrator to open a command line program.
2.Type the following command to find the IDX number of the NIC you want to use:
3.netsh interface IPv4 show interface (or abbreviated as netsh I I show in)
Type the following command to bind the router’s IP and MAC address:
netsh-c ¡°interface IPv4″ Add neighbors idx_number ¡°IP_Address” ¡°Mac_Address” (¡°interface IPv4″ can be simply written ¡°I I”)
E.g., netsh –c ¡°I I” add neighbors 11 ¡°192.168.1.1” ¡°00-22-aa-11-22-33”
To delete the binding, type the following command:
netsh-c ¡°interface IPv4″ Delete neighbors idx_number