《计算机网络安全防护技术（第二版）》 课件 第5章 任务5.4 ARP欺骗攻击及防御.pptx

第5章局域网安全技术;任务5.4ARP欺骗攻击及防御;5.4.1ARP欺骗攻击;二、查看路由器的相关接口配置的IP地址及路由表

1.查看路由器的配置

R1#showipintb

InterfaceIP-AddressOK?MethodStatusProtocol

GigabitEthernet0/054YESmanualupup

GigabitEthernet0/10YESmanualupup

GigabitEthernet0/2unassignedYESunsetadministrativelydowndown

GigabitEthernet0/3unassignedYESunsetadministrativelydowndown

;2.查看路由表

R1#showiproute

Codes:L-local,C-connected,S-static,R-RIP,M-mobile,B-BGP

D-EIGRP,EX-EIGRPexternal,O-OSPF,IA-OSPFinterarea

N1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2

E1-OSPFexternaltype1,E2-OSPFexternaltype2

i-IS-IS,su-IS-ISsummary,L1-IS-ISlevel-1,L2-IS-ISlevel-2

ia-IS-ISinterarea,*-candidatedefault,U-per-userstaticroute

o-ODR,P-periodicdownloadedstaticroute,H-NHRP,l-LISP

a-applicationroute

+-replicatedroute,%-nexthopoverride,p-overridesfromPfR

Gatewayoflastresortistonetwork

S*/0[1/0]via

/24isvariablysubnetted,2subnets,2masks

C/24isdirectlyconnected,GigabitEthernet0/0

L54/32isdirectlyconnected,GigabitEthernet0/0

/24isvariablysubnetted,2subnets,2masks

C/24isdirectlyconnected,GigabitEthernet0/1

L0/32isdirectlyconnected,GigabitEthernet0/1;三、在路由器上，ping各主机，查看ARP缓存表

1.PingDHCP服务器0

R1#ping0

2.PingkaliLinux主机1

R1#ping1

3.Ping客户机

R1#ping0

4.经过ping测试，R1获取到了各相关主机的MAC地址，通过查看R1上的ARP缓存表，确认各主机IP地址与MAC地址的对应关系。

R1#showarp

ProtocolAddressAge(min)HardwareAddrTypeInterface

Internet011010.1010.1010ARPAGigabitEthernet0/0

Internet106060.6060.6060ARPAGigabitEthernet0/0

Internet013030.3030.3030ARPAGigabitEthernet0/0

Internet54