[c-nsp] Proxy ARP -- To disable, or not to disable..

Mark Tinka mtinka at globaltransit.net
Fri Mar 21 22:27:44 EDT 2008


On Saturday 22 March 2008, Eric Cables wrote:

> A recent network audit has discovered that Proxy ARP is
> enabled on pretty much every L3 interface in the network.
>  As a Cisco default, this isn't surprising, since no
> template configs have it disabled.
>
> The question is: whether or not I should go back and
> disable it, or just leave it be, since it doesn't appear
> to be causing any problems.
>
> Any feedback would be appreciated.

Turn it off.

To borrow off Team Cymru's secure IOS template, "Don't 
pretend to be something you're not. :-)".

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 832 bytes
Desc: This is a digitally signed message part.
Url : https://puck.nether.net/pipermail/cisco-nsp/attachments/20080322/964a0089/attachment-0001.bin 


More information about the cisco-nsp mailing list