IP address embezzlement is a common and very harmful factor in network management .It not only brings the negative effects to the network charging but also destroys normal network operation and application. Consequently the solution of IP address embezzlement is the most important condition to guarantee the safe operation of campus network and trace or prevent attacks which stem from campus network. This paper regards the solution of IP address embezzlement as the starting point. On the basis of grasping the principle of IP address embezzlement, the paper analyses carefully the limitation of dualistic and ternary theft-proof model, along with the limitation of theft-proof model based on ARP protocol. After further investigating SNMP protocol, and aiming at the structure of our campus network, the author finally proposed a kind of new theft-proof scheme of four-layer model based on SNMP and user login and switch control. At the same time the theft-proof system is realized with a B/S structure and the functions of monitor, localization, warning, block network communication. Accordingly it defends effectively IP Address embezzlement.
|