2 / ИСС / Технологии, применяемые при построении сетей на основе коммутаторов D-Link_new Advanced_SMM

IP-MAC-Port Binding

( IP-MAC-)

		IP-MAC-Port Binding
	o
IP-MAC-	(IP-MAC-Port Binding)
IP-MAC-Port Binding		D-Link
		IP	MAC-	,
.	-			,
		MAC-		- .
		ETTH/ ETTB
		IP-MAC-Port
		Binding
			4
		3		IP-MAC-
		2		– MAC-
	1			!!

IP-MAC-Port binding?

•D-Link IP-MAC binding

IP-MAC-Port binding

.

•IP-MAC-Port binding : ARP (), ACL DHCP Snooping.

:

ARP

ACL

ACL

ACL,

hacker/sniffer

MAC

ACL

•IP-MAC-Port Binding L2 xStack – DES3000 ( ARP Mode), DES-3028/3052 (ARP Mode DHCP Snooping) DES3500 (R4 – ARP, ACL Mode DHCP Snooping), L3 - DES-3800 (R3 – ARP, ACL Mode DHCP Snooping), DGS-3600 DGS-3400.

• IP-MAC-Port binding,

, ARP Poison Routing.

1:		A B	,
A (sniffer)			ARP
			C

???

IP C

SA B

IP B

2: C IP/MAC.

C

ARP-

DA B

IP B

SA C

IP C

3: ATCP C

C

SYN

DA C

IP C

SA A

IP A

4: . . A , DES-3526 ,

,

C

SYN

DA C

IP C

SA A

IP A

2. ACL

ARP Man-in-the-Middle

1: Sniffer C (Man in the middle)ARP-Reply A B

					A						B

DA A	IP A
SA C	IP B

DA B	IP B
SA C	IP A

ARP-

2: ATCP B

A	B

SYN	DA C	IP B
	SA A	IP A

SYN

C ( IP-MAC-Port binding)