Re: Cain & Able man in the middle attack

[Kyle Evans <evans.584 () osu edu>]

There are specific models and IOS versions that support it.  Here is a 
link to a pdf with a feature comparison on page 10:

http://www.cisco.com/application/pdf/en/us/guest/products/ps708/c2072/cdccont_0900aecd805f0955.pdf


The feature comparison doesn't show IOS versions, but I do know that 
older IOS versions for the 3550 do not support the features.


To answer your other question, you can use DAI and IP source guard if 
your network doesn't use dhcp, but it is a lot more work.  Basically, 
both DAI and IPSG rely on dhcp snooping.  So you must be using dhcp 
snooping to use DAI and IPSG, and if you don't have dhcp on your 
network, then you must create a static entry in the dhcp snooping 
binding table for every host.


Kyle






dubaisans dubai wrote:
> Is there any specific Cisco IOS version or Cisco Switch hardware
> models versions which support Dynamic ARP inspection or do all of them
> support.?
>
> Does DAI work only if the network is using DHCP or will it work in
> static-IP-addressing is used also?
>
>
>
> On Dec 14, 2007 3:32 AM, Kyle Evans <evans.584 () osu edu> wrote:
>   
> > If you use cisco switches, you can use dhcp snooping, dynamic arp
> > inspection, and ip source guard.
> >
> >
> > Kyle
> >
> >
> >
> >
> > James Bensley wrote:
> >     
> > > I too have performed MITM attacks on my network with Cain & Able. Also
> > > having grabbed a few HTTP and FTP passwords seeing that it was
> > > successful I now need to secure my self against these attacks but how
> > > can I do this? Would static MAC mappings in my hosts files do the
> > > trick?
> > >
> > > Thanks for your time
> > > Bensley.
> > >
> > > ------------------------------------------------------------------------
> > > This list is sponsored by: Cenzic
> > >
> > > Need to secure your web apps NOW?
> > > Cenzic finds more, "real" vulnerabilities fast.
> > > Click to try it, buy it or download a solution FREE today!
> > >
> > > http://www.cenzic.com/downloads
> > > ------------------------------------------------------------------------
> > >
> > >
> > >
> > >       
> > ------------------------------------------------------------------------
> > This list is sponsored by: Cenzic
> >
> > Need to secure your web apps NOW?
> > Cenzic finds more, "real" vulnerabilities fast.
> > Click to try it, buy it or download a solution FREE today!
> >
> > http://www.cenzic.com/downloads
> > ------------------------------------------------------------------------
> >
> >
> >     
>
>   

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------