05-09-2002 01:52 AM - edited 03-01-2019 09:40 PM
Hello
We have just had someone type the ip address of the gateway as the ip address of a pc, this resulted in an entire subnet going down until we found the pc and shut down the port. Is there any way to prevent this apart from using dhcp etc. Thanks
05-09-2002 03:42 AM
There is no practical way to do this, even if you use DHCP. Someone could still hardcode their interface with an IP address at any time.
The only thing that comes to mind (remember, this isn't *practical*) is to add static ARP entries to every single computer on your network with the MAC/IP address of the default gateway. This might be accomplished with a login script issuing the command:
arp -s 157.55.85.212 00-aa-00-62-c6-09
Mick.
05-09-2002 04:29 AM
You can configure policies on the Operating System to prevent users from changing the IP address.
05-09-2002 05:17 AM
From the network point-of-view, you cannot do anything.
JPL.
05-12-2002 12:38 AM
You can add a permenant arp entry for the routers in all stations, you can do it automatcally bu using an automatic logon script.
> arp -s -p ip_address mac_address
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide