ARP Spoof

[wanhwai]

Hi,

I am new to ARP spoof ,any suggestion for how to prevent or solve this issue in cisco environment.

[mheusinger]

Hello,

in Catalyst switches the feature is called "Dynamic ARP Inspection (DAI)". The command is "ip arp inspection ..." and the technical details and all configuration options can be found at "Configuring Dynamic ARP Inspection (DAI)"

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a00804357b1.html

Hope this helps! Please rate all posts.

Regards, Martin

[dazza_johnson]

Yup, DAI is the way forward here. To learn a little more, check out the 8-page ARP Spoofing MITM attack demonstration which gleans Telnet username/passwords credentials - using the OG150 security dropbox. You can see the tutorial at: http://www.og150.com/tutorials.php

Go to: "ARP Spoofing MITM Attack, Capturing Telnet Data" at this URL:

Only then will you realise the danger that surrounds ARP spoofing...

Thanks

Darren