D-Link xStack DGS-3200-10 - Prevent Arp Spoofing Via Packet Content Acl

xStack
®
DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch
Figur
e 5
Prevent ARP Spoofing via Packet Content ACL
D-Link managed switches can effectively mitigate common DoS attacks caused by ARP spoofing via a uni que Package Content
ACL.
For th e reason th at basic ACL can on ly filter ARP packets based on packet typ e, VLAN ID, Sou rce, an d Destinatio n M AC
information, there is a need for further inspections of ARP packets. To prevent ARP spoofing attack, we will demonstrate here via
using Packet Content ACL on the Switch to block the invalid ARP packets which contain faked gateway’s MAC and IP binding.
Example topology
261