Hi, On Sat, Nov 17, 2007 at 10:33:43PM +0100, Daniel Roesen wrote: > On Fri, Nov 16, 2007 at 04:50:00PM +0100, Gert Doering wrote: > > Hooray for Cisco default "features". This is one of the more stupid > > ones, especially as it's enabled by default. > > > > Have them configure "no ip gratuitous-arps". > > At least it's configurable on global level, unlike "no ip proxy-arp" > and "no ip redirects" (and others). :-(
hmm... I've always been of the (possibly wrong) opinion that "no ip gratuitous-arps" was only relevant in PPP scenarios and subsequently has no effect in (most) ethernet environments (which is the reason why I took it off my L2 hardening templates). can anybody shed light on this? thanks, Enno -- Enno Rey ERNW GmbH - Breslauer Str. 28 - 69124 Heidelberg - www.ernw.de Tel. +49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902 PGP FP 055F B3F3 FE9D 71DD C0D5 444E C611 033E 3296 1CC1 Handelsregister Heidelberg: HRB 7135 Geschaeftsfuehrer: Roland Fiege, Enno Rey _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
