Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have heard a lot of people mention that wireless networks are far more vulnerable to ARP poisoning attacks. Why would this be so? Why could you not employ similar protections as for a switched network on an AP?

Are there any other attacks layer 2 specific to wireless networks?

share|improve this question

My understanding has always been that, once you're on the network, ARP-cache poisoning is equally easy on either kind of network. But to get onto a wireline network, you have to get to the switch and connect to it; to get on a wireless network, you need only be within range of the AP (for unencrypted networks), and quickly crack the key (for WEP-secured networks). The opportunity for attack is much greater on (under-encrypted) wireless than on wireline.

share|improve this answer
I thought it was more than just the physical ease of being able to join the network. On a switched network you can actually configure the switch to be resistant to ARP singing...why can't you do this for a wireless AP? – user47587 Nov 13 '10 at 8:22
Well for a start, a wireless AP is more akin to a hub than a switch. – RobM Nov 13 '10 at 8:47
@Jacob Robert is completely right, it's harder to make non-bridged networked ARP-poisoning resistant since peers see traffic at the same time as the gateway/AP. In switched networks all traffic has to pass through the switch first so you have a chance of preventing evil. – sysadmin1138 Nov 13 '10 at 16:55

Basically a Replay Attack can be used..

1.) Capture other peoples packets..

2.) Edit them..

3.) Send them to the wireless AP

4.) Ignore the response ...

Effectively confusing the router to where packet originated..
Its very simple to do even on secured WLANs.. and as mentioned, much easier to get access too as you dont need "physical access"

Hope this makes things much clearer

share|improve this answer

arp attacks work very well on boardcast media like wireless and old hub ethernet networks. with switched networks the attackes do not work as well because the switch learns arp and smart switches can mitigate these attackes.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.