HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
Comware Based
cancel
Showing results for 
Search instead for 
Did you mean: 

Stopping ARP proxing comware 7

 
pattap
Regular Advisor

Stopping ARP proxing comware 7

Hi All

We have currently discovered that while connected to our wifi guest we are able to perform arp-scan which allows us to obtain MAC and IP addresses of host beyond wifi guest range.

We have HP 5900AF-48XG running Version 7.1.045, Release 2311P05 acting as a layer 3 and gateway for guest wifi.

According to official HP guide for the switch ARP proxy is disabled by default, the below output indicates the same:

[5900]dis proxy-arp interface Vlan-interface 100
Interface Vlan-interface100
 Proxy ARP status: disabled

what am I missing here, how to stop switch from responding to these ARP requests

 

1 REPLY
johnk3r
Respected Contributor

Re: Stopping ARP proxing comware 7

Post the output of the command below:

dis proxy-arp

 

**************************************
ATP FLEXNETWORK V3 | ACSA