Security Basics mailing list archives

RE: switch summit extreme plus static permanent arp table


From: "Lall, Navneet Singh" <nlall () ipolicynetworks com>
Date: Tue, 28 Nov 2006 09:04:12 +0530

Hi,

You can stop mac address learning by using static arp tables. But this
Has an disadvantage that you need to update it whenever you change the
ip to mac mapping. However most of the time changes are not frequent.

Navneet Singh

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of tannhauser
Sent: Tuesday, November 28, 2006 4:07 AM
To: security-basics () securityfocus com
Subject: Re: swicth summit extreme plus static permanent arp table

Hi,

On Sat, 25.11, 11:39, Arjuna Scagnetto wrote:
Hi guys,

can someone tell me how to stop the switch, a summit extreme 400-48t,
from 
learning new mac-address.

Not a direct answer, but arpstar (arpstar.sourceforge.net) can prevent
the (linux) computers in your network to get fooled. 
Btw, does anyone know about anything else that actually can stop -not
just detect- arpspoofing? 

tannhauser


Current thread: