[Strange behavior with arp permanent entries]

[ea at sellinet.net]

> On Sat, Feb 10, 2007 at 07:33:30PM +0200, ea at sellinet.net wrote:
>>
>> I'm trying to restrict some LAN access by arp permanent entries. But it
>> didn't work or it didn't work as I realize it. For example I have the
>> following perm entries:
>>
>> user1: (82.199.215.195) at 00:0f:ea:a4:60:c5 on vlan804 permanent [vlan]
>> user2: (82.199.215.196) at 00:13:8f:b1:68:4b on vlan804 permanent [vlan]
>>
>> And from what I realize if the user1 attempts to use user2's IP address.
>> The Router should block all packets which coming from wrong physical
>> address. But actually that didn't happen and user1 can use user2's IP
>> address without any problems.
>
> Have you tried using 'staticarp' in this interface's ifconfig(8)
> settings?  If you turn on staticarp, you'll probably need to specify
> arp entries for ALL hosts on that interface -- or at least, all the
> ones you care about.
>


Yea, I tried but the situation is the same as it was without
staticarp..Any other ideas?

Regards,

E.A.


> HTH,
>
> Jim
> _______________________________________________
> freebsd-isp at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe at freebsd.org"
>



--------------------------------------------------------------
SELLINET Internet Services Provider - http://www.sellinet.net/