Ruijie RG-WLAN Series User Manual

Configuration Guide Configuring Gateway-targeted ARP Spoofing Prevention
6 Configuring Gateway-targeted ARP Spoofing Prevention
6.1 Overview
Gateway-targeted Address Resolution Protocol (ARP) spoofing prevention effectively prevents gateway-targeted ARP
spoofing by checking on the logical port whether the source IP addresses of ARP packets (Sender IP fields of ARP packets)
are the self-configured gateway IP addresses.
Protocols and Standards
 RFC 826: Ethernet Address Resolution Protocol
6.2 Applications
6.2.1 Typical Application of Gateway-targeted ARP Spoofing Prevention
Scenario
 PC users access the office server through the access device Switch A, and connect to external networks through the
gateway.
 If any users legally use forged gateway IP addresses or server IP addresses to perform ARP spoofing, the other users
cannot access the Internet and the server.
 The ARP spoofing packets with forged gateway address and intranet server IP addresses must be blocked to ensure
that users can access the Internet.
Figure 5-3 Typical Topology of Gateway-targeted ARP Spoofing Prevention

Ruijie RG-WLAN Series Specifications

General

Brand	Ruijie
Model	RG-WLAN Series
Category	Wireless Access Point
Language	English