[c-nsp] Proxy ARP -- To disable, or not to disable..

Phil Mayers p.mayers at imperial.ac.uk
Fri Mar 21 19:52:37 EDT 2008


Eric Cables wrote:
> A recent network audit has discovered that Proxy ARP is enabled on pretty
> much every L3 interface in the network.  As a Cisco default, this isn't
> surprising, since no template configs have it disabled.
> 
> The question is: whether or not I should go back and disable it, or just
> leave it be, since it doesn't appear to be causing any problems.

Absolutely disable it, because:

  1. it can mask mis-configurations
  2. those mis-configurations can chew enormous amounts of resource on 
your network kit

> 
> Any feedback would be appreciated.
> 



More information about the cisco-nsp mailing list