Disables gratuitous ARP protection on the specified VLAN (Virtual LAN).
| vlan_name | Specifies the VLAN. |
| vlan_list | Specifies a VLAN list of IDs. |
Disabled.
Hosts can launch man-in-the-middle attacks by sending out gratuitous ARP requests for the router's IP address. This results in hosts sending their router traffic to the attacker, and the attacker forwarding that data to the router. This allows passwords, keys, and other information to be intercepted.
To protect against this type of attack, the router will send out its own gratuitous ARP request to override the attacker whenever a gratuitous ARP broadcast with the router's IP address as the source is received on the network.
This command disables gratuitous ARP protection.
The following example disables gratuitous ARP protection for VLAN corp:
disable iparp gratuitous protect vlan corp
This command was first available in ExtremeXOS 11.2.
The vlan_list option was added in ExtremeXOS 16.1.
This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X620, X690, X870 series switches.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB