Protection from ARP spoofing

Question

I'm running Linux and I know my gateway will always be 192.168.1.254 with MAC address aa:aa:aa:aa:aa:aa.

Is there any way I can instruct my machine to only ever use this MAC address for the gateway and ignore all ARP responses for this IP address?

gparent · Accepted Answer · 2013-03-14T17:52:53.203

8

You can use arp to control the ARP tables.

arp -s 192.168.1.254 aa:aa:aa:aa:aa:aa

will statically map the IP to the MAC, bypassing ARP, and should do the trick.

edited Mar 14 '13 at 17:52

answered Mar 13 '13 at 14:59

gparent

score 1 · Answer 2 · edited Apr 13 '17 at 12:22

1

ARP has to do with ethernet<->ip mapping, not default gateway setting.

After you set up static network address/gateway (link) you can add a static arp entry for your gateway (link)

arp -i <your interface> -s <ip.of.the.gateway> <mac:of:the:gateway>
arp -i eth0 -s 192.168.1.254 aa:aa:aa:aa:aa:aa

edited Apr 13 '17 at 12:22

Community

answered Mar 13 '13 at 15:00

mulaz

2 Answers2