Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 10 Feb 2007 10:20:15 -0800
From:      Jim Long <isp@museum.rain.com>
To:        ea@sellinet.net
Cc:        freebsd-isp@freebsd.org
Subject:   Re: [Strange behavior with arp permanent entries]
Message-ID:  <20070210182015.GA9234@ns.umpquanet.com>
In-Reply-To: <2947.82.199.223.6.1171128810.squirrel@82.199.223.6>
References:  <2947.82.199.223.6.1171128810.squirrel@82.199.223.6>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Feb 10, 2007 at 07:33:30PM +0200, ea@sellinet.net wrote:
> 
> I'm trying to restrict some LAN access by arp permanent entries. But it
> didn't work or it didn't work as I realize it. For example I have the
> following perm entries:
> 
> user1: (82.199.215.195) at 00:0f:ea:a4:60:c5 on vlan804 permanent [vlan]
> user2: (82.199.215.196) at 00:13:8f:b1:68:4b on vlan804 permanent [vlan]
> 
> And from what I realize if the user1 attempts to use user2's IP address.
> The Router should block all packets which coming from wrong physical
> address. But actually that didn't happen and user1 can use user2's IP
> address without any problems.

Have you tried using 'staticarp' in this interface's ifconfig(8) 
settings?  If you turn on staticarp, you'll probably need to specify 
arp entries for ALL hosts on that interface -- or at least, all the 
ones you care about.

HTH,

Jim



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070210182015.GA9234>