Re: [fw-wiz] Windows dynamic ARP

Hey Paul,

Happy Holidays.

I think you can the DOS arp command to statically populate your local cache with permanent entries. I would set up your login scripts on all workstations to do something like this:

arp -d * //delete all entries in the cache
arp -s ip mac
arp -s ip2 mac2

Note that I think these are permanent entries in the sense they are static, but not persistent across reboots.


C:\> arp

Displays and modifies the IP-to-Physical address translation tables used by
address resolution protocol (ARP).

ARP -s inet_addr eth_addr [if_addr]
ARP -d inet_addr [if_addr]
ARP -a [inet_addr] [-N if_addr]
-d Deletes the host specified by inet_addr. inet_addr may be
wildcarded with * to delete all hosts.
-s Adds the host and associates the Internet address inet_addr
with the Physical address eth_addr. The Physical address is
given as 6 hexadecimal bytes separated by hyphens. The entry
is permanent.
> arp -s 00-aa-00-62-c6-09 .... Adds a static entry.
> arp -a .... Displays the arp table.


-----Original Message-----
From: firewall-wizards-bounces@xxxxxxxxxxxxxxxxxxxxx
[mailto:firewall-wizards-bounces@xxxxxxxxxxxxxxxxxxxxx]On Behalf Of Paul
D. Robertson
Sent: Wednesday, November 26, 2008 9:12 AM
To: firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
Subject: [fw-wiz] Windows dynamic ARP

Does anyone know a way to turn OFF dynamic ARP on Windows? I'd like to
set up a network where static ARP entries are the only way to communicate.


Paul D. Robertson "My statements in this message are personal opinions
paul@xxxxxxxxxxxx which may have no basis whatsoever in fact."

firewall-wizards mailing list
firewall-wizards mailing list