
UNSOLVED
GN
GC Networx
1 Rookie
•
21 Posts
0
7383
July 13th, 2004 21:00
Arp proxy on 6K
This feature is turned off by default. It is a useful troubleshooting feature. Is their a reason wht it is set by default to disabled. Does Dell recommend not using this feature? i would like to use it, but am curious as to its fefault setting.
thanks
Responses (1)
Solutions (0)

GregG1
2 Intern
•
812 Posts
292
0
Posted July 13th, 2004 21:00
This feature is disabled to provide as much security as possible from the default configuration.
Because proxy ARP allows hosts from different LAN segments to look like they are on the same segment, proxy ARP is only safe when used between trusted LAN segments. Attackers can take advantage of the trusting nature of proxy ARP by spoofing a trusted host and then intercepting packets. Due to this security weakness, most vendors (including Cisco) recommend that you always disable proxy ARP on router interfaces that do not require it.