TP-Link TL-SG5412F User Manual

11.2 ARP Inspection
According to the ARP Implementation Procedure stated in 11.1.3 ARP Scanning, it can be found
that ARP protocol can facilitate the Hosts in the same network segment to communicate with one
another or access to external network via Gateway. However, since ARP protocol is implemented
with the premise that all the Hosts and Gateways are trusted, there are high security risks during
ARP Implementation Procedure in the actual complex network. Thus, the cheating attacks against
ARP, such as imitating Gateway, cheating Gateway, cheating terminal Hosts and ARP Flooding
Attack, frequently occur to the network, especially to the large network such as campus network
and so on. The following part will simply introduce these ARP attacks.
 Imitating Gateway
The attacker sends the MAC address of a forged Gateway to Host, and then the Host will
automatically update the ARP table after receiving the ARP response packets, which causes that
the Host can not access the network normally. The ARP Attack implemented by imitating Gateway
is illustrated in the following figure.
Figure 11-9 ARP Attack - Imitating Gateway
As the above figure shown, the attacker sends the fake ARP packets with a forged Gateway
address to the normal Host, and then the Host will automatically update the ARP table after
receiving the ARP packets. When the Host tries to communicate with Gateway, the Host will
encapsulate this false destination MAC address for packets, which results in a breakdown of the
normal communication.
 Cheating Gateway
The attacker sends the wrong IP address-to-MAC address mapping entries of Hosts to the
Gateway, which causes that the Gateway can not communicate with the legal terminal Hosts
normally. The ARP Attack implemented by cheating Gateway is illustrated in the following figure.
155

TP-Link TL-SG5412F Specifications

General

MAC address table	8000 entries
Jumbo frames support	Yes
Maximum data transfer rate	1 Gbit/s
Supported data transfer rates	10, 100, 1000Mbps
Fan	0
Wi-Fi	No
Diagnostics	VCT
Management platform	SNMP, RMON, WEB/CLI/Telnet
Authentication method	802.1X, Radius
Packet transfer speed	17.99Mpps
Connectivity technology	Wired
Networking standards	IEEE 802.1D, IEEE 802.1p, IEEE 802.1Q, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3i, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Copper ethernet cabling technology	1000BASE-T, 100BASE-TX, 10BASE-T
DHCP features	DHCP client
Security algorithms	SSH, SSL/TLS
Switch type	Managed
Switch layer	L2
Console port	RJ-45
Fiber optic connector	SFP
SFP/SFP+ slots quantity	12
Basic switching RJ-45 Ethernet ports quantity	4
Fiber ethernet cabling technology	100BASE-FX
AC input voltage	100 - 240 V
AC input frequency	50 - 60 Hz
Stackable	-
Form factor	1U
Certification	CE, FCC
Product color	Black
Compatible operating systems	Windows 98SE, NT, 2000, XP, Vista, Windows 7\\r MAC OS\\r NetWare\\r UNIX\\r Linux
Storage temperature (T-T)	-40 - 70 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 90 %
Operating relative humidity (H-H)	10 - 90 %

Weight and Dimensions

Depth	260 mm
Width	440 mm
Height	44 mm