- 论坛徽章:
- 0
|
如何防止局域网中的IP冲突?
在http://www.linuxgazette.com/node/509找到了关于ARP daemon support的资料,
At me one network in which now 1400 devices. While them was less than 1024 made the static
table, now dynamic and periodically out the message " Neighbour table overflow ". It can is possible to
correct something in a kernel?
If I'm reading this correctly: you have a LAN segment with about 1400 (ethernet) devices on it. When
you surpassed 1024 devices on the segment you started noticing errors regarding the Neighbour table
overflow.
The solution to this is to move ARP (address resolution protocol) handling out of the kernel and into
user space. This involves two steps. Reconfigure your kernel with CONFIG_ARPD = y (You'll have to enabled
the option to " rompt for experimental features/drivers" near the top of your make menuconfig or make
xconfig.
Under: Code maturity level options --->;
Prompt for development and/or incomplete code/drivers
Then under: Networking options --->;
IP: ARP daemon support (EXPERIMENTAL) (NEW)
Then from the help text thereunder:
...............
Normally, the kernel maintains an internal cache which maps IP addresses to hardware addresses
on the local network, so that Ethernet/Token Ring/ etc. frames are sent to the proper address on
the physical networking layer. For small networks having a few hundred directly connected hosts or
less, keeping this address resolution (ARP) cache inside the kernel works well. However,
maintaining an internal ARP cache does not work well for very large switched networks, and will use
a lot of kernel memory if TCP/IP connections are made to many machines on the network.
If you say Y here, the kernel's internal ARP cache will never grow to more than 256 entries (the
oldest entries are expired in a LIFO manner) and communication will be attempted with the user
space ARP daemon arpd. Arpd then answers the address resolution request either from its own cache
or by asking the net.
...............
Then you have to go fetch and install an ARP daemon. Under Debian
that would be as simple as: apt-get -f install arpd
看起来这个似乎也不能解决应答windows的IP是否占用的查询吧。有谁试试?
楼上有人说DHCP之类纯属瞎说,别人不会自己改么?行政手段之类也只是对有的情况有些作用,但也不是根本之道,因为有的情况,比如网吧,该怎么办?现在连传奇木马这样的程序都可能改IP为网关的IP!!! |
|