Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have to disable arp poisoning on our dell 5448 switch. Right now it has all our production machines running on it and I'm not a networking guy at all so I don't want to run a command that will disable arp on all ports while setting up something like static arp's per port.

Is there anyway to stop arp poisoning from happening while keeping it open to dynamic arp requests.. or is there a way to slowly move over. Better yet is there a way to just make 1 port have a static arp and all the others are dynamic..

thanks!

share|improve this question
1  
2nd degree burns prevent acne, but that's not generally a good reason to light your head on fire. Are you sure the problem is worse than the cure? –  HopelessN00b Jan 4 '13 at 1:51
    
it's needed for pci compliance by our auditor –  Mike Jan 4 '13 at 2:07
3  
I doubt it. I've been through PCI audits before, and never had to do anything as retarded as manually create ARP tables for our switches. I'd seriously suggest that your auditor's an idiot who doesn't have half a clue about what the funny techie words and acronyms mean, and your best approach is to convince him of the error of his ways, and that you can secure your network without this... insanity. –  HopelessN00b Jan 4 '13 at 2:15
    
I agree.. we got through 3 other internal pen tests just fine.. this guy is complaining about everything –  Mike Jan 4 '13 at 2:20
3  
So get the douchebag fired or assigned to someone else's problem. Ultimately, your company pays these asshats, so I'd stand up to him, and tell him to start being reasonable/competent in a hurry, or risk being replaced by a different auditor/company. –  HopelessN00b Jan 4 '13 at 2:28
show 2 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.