Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: switch summit extreme plus static permanent arp table

Subject: Re: switch summit extreme plus static permanent arp table
Date: Wed, 29 Nov 2006 07:34:00 -0500
And if you are working with Windows and AD you can simply send the
changes via a script to all your user. I don't think you even need AD
to send an "opening" script.

cheers

--
Machiavel

On 11/27/06, Lall, Navneet Singh <nlall@ipolicynetworks.com> wrote:
Hi,

You can stop mac address learning by using static arp tables. But this
Has an disadvantage that you need to update it whenever you change the
ip to mac mapping. However most of the time changes are not frequent.

Navneet Singh

-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of tannhauser
Sent: Tuesday, November 28, 2006 4:07 AM
To: security-basics@securityfocus.com
Subject: Re: swicth summit extreme plus static permanent arp table

Hi,

On Sat, 25.11, 11:39, Arjuna Scagnetto wrote:
> Hi guys,

> can someone tell me how to stop the switch, a summit extreme 400-48t,
from
> learning new mac-address.

Not a direct answer, but arpstar (arpstar.sourceforge.net) can prevent
the (linux) computers in your network to get fooled.
Btw, does anyone know about anything else that actually can stop -not
just detect- arpspoofing?

tannhauser



<Prev in Thread] Current Thread [Next in Thread>