Netgear XCM8810 Chassis Hardware Installation Guide - Page 605

NETGEAR 8800 Chassis Switch CLI Manual vlan-name Specifies the VLAN. Default By default, gratuitous ARP protection is disabled. Usage Guidelines This command replaces the disable iparp gratuitous protect vlan command. Hosts can launch man-in-the-middle attacks by sending out gratuitous ARP requests for the router's IP address. This results in hosts sending their router traffic to the attacker, and the attacker forwarding that data to the router. This allows passwords, keys, and other information to be intercepted. To protect against this type of attack, the router will send out its own gratuitous ARP request to override the attacker whenever a gratuitous ARP broadcast with the router's IP address as the source is received on the network. This command disables gratuitous ARP protection. Example The following command disables gratuitous ARP protection for VLAN corp: disable ip-security arp gratuitous-protection vlan corp disable ip-security arp learning learn-from-arp disable ip-security arp learning learn-from-arp {vlan} ports [all | ] Description Disables ARP learning on the specified VLAN and member ports. Syntax Description vlan_name all ports Specifies the name of the VLAN to which this rule applies. Specifies all ingress ports. Specifies one or more ingress ports. Default By default, ARP learning is enabled. Usage Guidelines You can disable ARP learning so that the only entries in the ARP table are either manually added or those created by DHCP secured ARP; the switch does not add entries by tracking Chapter 15. Security Commands | 605