Got it

ARP attacks and how to prevent them

Created: Oct 23, 2020 23:38:15Latest reply: Oct 27, 2020 22:30:46 434 7 6 0 0
  Rewarded HiCoins: 1 (problem resolved)

Hi guys,


What are the most common ARP attacks and how can be prevented?


Featured Answers
chenhui
Admin Created Oct 24, 2020 01:43:28

Hi,
The most common ARP attacks might be the MITM(man in the middle). An MITM attacker establishes connections with two ends and exchanges data between them. The two ends consider that they are directly communicating, but actually the attacker has controlled the entire session. In an MITM attack, the attacker intercepts all packets going between the two ends and inserts new ones.
Usually, most of the ARP attacks could be prevented by configuring the DAI. You can refer https://support.huawei.com/hedex/hdx.do?docid=EDOC1100064949&id=dc_fd_ARP_SEC_0010&lang=en
View more
  • x
  • convention:

Herediano
Herediano Created Oct 24, 2020 17:04:09 (0) (0)
Thanks @chenhui  
All Answers
DDSN
DDSN Admin Created Oct 24, 2020 01:18:05

Hi Herediano,
Please wait patiently. Our engineers are looking for answers to your questions.
View more
  • x
  • convention:

Hi,
The most common ARP attacks might be the MITM(man in the middle). An MITM attacker establishes connections with two ends and exchanges data between them. The two ends consider that they are directly communicating, but actually the attacker has controlled the entire session. In an MITM attack, the attacker intercepts all packets going between the two ends and inserts new ones.
Usually, most of the ARP attacks could be prevented by configuring the DAI. You can refer https://support.huawei.com/hedex/hdx.do?docid=EDOC1100064949&id=dc_fd_ARP_SEC_0010&lang=en
View more
  • x
  • convention:

Herediano
Herediano Created Oct 24, 2020 17:04:09 (0) (0)
Thanks @chenhui  

Hello friend!

Attackers usually steal authorized users' IP addresses to connect to networks and initiate ARP attacks to interrupt network communication.
To defend against ARP attacks, a static user binding table and dynamic ARP inspection (DAI) can be configured for static users. DAI checks ARP packets based on binding entries.
Run the user-bind static command to configure the static user binding table, and run the arp anti-attack check user-bind enable command to enable DAI.

https://support.huawei.com/enterprise/en/doc/EDOC1000178177/bd2ff655/how-can-i-prevent-arp-attacks-targeted-at-static-users

Thanks!

View more
  • x
  • convention:

Herediano
Herediano Created Oct 24, 2020 17:04:31 (0) (0)
Thanks @Unicef  
I have this problem too
View more
  • x
  • convention:

Thanks!
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.