TP-Link TL-SL5428E User Manual page 218

Gzkuvgf"Qrvkqp":4"hkgnf<"
Ektewkv"KF<"
Tgoqvg"KF<"
Qrvkqp":4"Eqphki"Nkuv"
"
Displays the option 82 configuration of the ports.
3505"CTR"Kpurgevkqp"
According to the ARP Implementation Procedure stated in 13.1.3 ARP Scanning, it can be found
that ARP protocol can facilitate the Hosts in the same network segment to communicate with one
another or access to external network via Gateway. However, since ARP protocol is implemented
with the premise that all the Hosts and Gateways are trusted, there are high security risks during
ARP Implementation Procedure in the actual complex network. Thus, the cheating attacks against
ARP, such as imitating Gateway, cheating Gateway, cheating terminal Hosts and ARP Flooding
Attack, frequently occur to the network, especially to the large network such as campus network
and so on. The following part will simply introduce these ARP attacks.
Kokvcvkpi"Icvgyc{"
"
The attacker sends the MAC address of a forged Gateway to Host, and then the Host will
automatically update the ARP table after receiving the ARP response packets, which causes that
the Host cannot access the network normally. The ARP Attack implemented by imitating Gateway
is illustrated in the following figure.
Select the operation for the Option 82 field of the DHCP request
packets from the Host.
Mggr< Indicates to keep the Option 82 field of the packets.
"
Tgrnceg< Indicates to replace the Option 82 field of the
"
packets with the switch defined one.
Ftqr< Indicates to discard the packets including the Option
"
82 field.
Enter the sub-option Circuit ID for the customized Option 82.
Enter the sub-option Remote ID for the customized Option 82.
Figure 13-10 ARP Attack - Imitating Gateway
206