Detections
Analytics

2.3 Disable the Proxy ARP Function - d) No local-proxy-arp

Information

Proxy ARP should be used in networks where the host is not configured with default gateway or there is no routing policy.

 Proxy ARP has negative effects:
 1. ARP traffic on one network segment is increased
 2. The host needs a larger ARP table to process the mapping from IP address to MAC address
 3. Security problems are available, such as ARP spoofing (spoofing)
 4. Does not work for a network that does not use ARP to parse addresses
 5. Network topology cannot be summarized and promoted

 NOTE: proxy has been configured.

Solution

Disable the functions related to Proxy ARP:

 ZXR10 (config)#arp
 ZXR10 (config-arp)#interface fei-0/1/1/13
 ZXR10 (config-arp-if)#no proxy
 ZXR10 (config-arp-if)#no inter-vlan-proxy
 ZXR10 (config-arp-if)#no proxy local
 ZXR10 (config-arp-if)#no local-proxy-arp

See Also

https://support.zte.com.cn/support/doccenter/DocumentProductHandBookDetail.aspx?sid=102&id=30768582&type=docfeedback

Item Details

Plugin: ZTE_ROSNG

Control ID: 4c62284316f1246e0db7395ad4d30205d2ff556077db287766d895d98d6e3103