address 4b:86:f6:c5:a2:14 on the lan interface:
Command-Line Interface
gw-world:/> add ARPND Interface=lan
IP=192.168.10.15
Mode=Static
MACAddress=4b-86-f6-c5-a2-14
Web Interface
1. Go to: Network > Interfaces and VPN > ARP/NeighborDiscovery > Add >
ARP/NeighborDiscovery
2. Select the following:
• Mode: Static
• Interface: lan
3. Enter the following:
• IP Address: 192.168.10.15
• MAC: 4b-86-f6-c5-a2-14
4. Click OK
3.5.4. Using ARP Advanced Settings
This section presents some of the advanced settings related to ARP. In most cases, these settings
need not to be changed, but in some deployments, modifications might be needed.
A complete list of all ARP advanced settings can be found in the separate NetDefendOS CLI
Reference Guide under the object name ARPNDSettings.
Multicast and Broadcast
ARP requests and ARP replies containing multicast or broadcast addresses are usually never
correct, with the exception of certain load balancing and redundancy devices, which make use of
hardware layer multicast addresses.
The default behavior of NetDefendOS is to drop and log such ARP requests and ARP replies. This
can, however, be changed by modifying the advanced settings ARP Multicast and ARP
Broadcast.
Unsolicited ARP Replies
It is possible for a host on a connected network to send an ARP reply to NetDefendOS even
though a corresponding ARP request was not issued. This is known as an unsolicited ARP reply.
According to the ARP specification, the recipient should accept these types of ARP replies.
However, because this could be a malicious attempt to hijack a connection, NetDefendOS will, by
default, drop and log unsolicited ARP replies.
Chapter 3: Fundamentals
226
To Next Page
Loading...
