LAN printer ARP virus solution example

In the network, especially in the local area network, ARP spoofing is often encountered, which affects the normal application of our printer in the network. The reason for the specific occurrence of ARP spoofing is not explained here. It is good to directly understand the situation and the solution.

Generating phenomenon:

Three printers can issue orders when testing. When the business is in normal operation, the amount of data is large, and the three printers are responsible for the categories that have data to be processed. When printing, there is a printer abnormality, PING processing on the server side, showing that one of the three printers is unreachable, changing the client PING, everything is normal, when you send a print command to the abnormal printer at another client, The printer prints normally and prints with the documents to be printed that were originally backlogged on the server.

The misunderstanding is that it is generally believed that the newly established LAN cannot have a virus, and the network cabling is not the one we handle, and the network cable used is less, so we will pay attention to the quality of the network cable and the interference of the environment on the network shielding. At the same time, it is possible that the MAC address of the printer is duplicated at the factory (the printer MAC address can be modified so it may be repeated by coincidence).

Detection method:

After PING each printer IP, check the MAC address of the PING address just now, check and judge whether there is duplicate MAC address, if any, then corresponding The printer performs a self-test and checks whether the printer ID number is duplicated. If the printer ID number is duplicated, it indicates that the MAC address is duplicated non-ARP, but there is a duplicate conflict when the printer MAC address is set, and the printer's MAC address needs to be modified. If the ID number of the printer is not duplicated, it can be initially determined that there is ARP spoofing in the LAN.

Solution:

Power down the conflicting printer and clear the computer ARP. Then connect a printer, check its ARP address, and record, then clear the computer ARP again, change another printer to detect, record its MAC address, and bind the MAC address on the server that needs to print. .