The hotel's internet access is unstable and it is often disconnected.

Obviously, it is due to the arp virus of some terminals in the intranet. There are two kinds of arp attacks: one is to cheat the intranet client, that is, the host with arp virus keeps sending the wrong gateway MAC-IP correspondence to other hosts in the local area network (sending a broadcast saying that it is a gateway), and as a result, other hosts in the local area network send all data packets to the poisoned host, which eventually leads to data failure and disconnection; The other is to cheat the gateway, that is, the poisoned machine continuously sends the wrong mac-ip correspondence of the intranet client to the gateway at high frequency to change the arp table of the gateway (that is, the ip addresses of the Macs of the clients under the gateway are all their own), which leads to the data sent by the intranet to the public network being returned to the poisoned host when returning, and finally leads to the intranet client being unable to accept the data returned by the public network and displaying disconnection.

At present, the most commonly used method is double binding, but this is only a temporary solution.

It is impossible to realize the security management of intranet only by relying on hardware equipment and binding. Only by upgrading the ordinary network of the intranet to "immune network" can the security management of the intranet be truly realized. Xinxiang immune wall router adopts the combination of software and hardware to completely solve the arp attack caused by the vulnerability of Ethernet underlying protocol! !

The main idea of immune network is self-defense and management.