Re: [fw-wiz] Windows dynamic ARP


Hey Paul,

Happy Holidays.

I think you can the DOS arp command to statically populate your local cache with permanent entries. I would set up your login scripts on all workstations to do something like this:

arp -d * //delete all entries in the cache
arp -s ip mac
arp -s ip2 mac2

Note that I think these are permanent entries in the sense they are static, but not persistent across reboots.

References:

http://www.tcpipguide.com/free/t_ARPCaching.htm
http://www.tcpipguide.com/free/t_TCPIPAddressResolutionProtocolUtilityarp.htm
http://stackoverflow.com/questions/255672/static-arp-entry-disappears-on-restart-in-windows-server-2003


C:\> arp

Displays and modifies the IP-to-Physical address translation tables used by
address resolution protocol (ARP).

ARP -s inet_addr eth_addr [if_addr]
ARP -d inet_addr [if_addr]
ARP -a [inet_addr] [-N if_addr]
..
..
..
-d Deletes the host specified by inet_addr. inet_addr may be
wildcarded with * to delete all hosts.
-s Adds the host and associates the Internet address inet_addr
with the Physical address eth_addr. The Physical address is
given as 6 hexadecimal bytes separated by hyphens. The entry
is permanent.
..
..
..
Example:
> arp -s 157.55.85.212 00-aa-00-62-c6-09 .... Adds a static entry.
> arp -a .... Displays the arp table.



--p


-----Original Message-----
From: firewall-wizards-bounces@xxxxxxxxxxxxxxxxxxxxx
[mailto:firewall-wizards-bounces@xxxxxxxxxxxxxxxxxxxxx]On Behalf Of Paul
D. Robertson
Sent: Wednesday, November 26, 2008 9:12 AM
To: firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
Subject: [fw-wiz] Windows dynamic ARP


Does anyone know a way to turn OFF dynamic ARP on Windows? I'd like to
set up a network where static ARP entries are the only way to communicate.

Thanks,

Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
paul@xxxxxxxxxxxx which may have no basis whatsoever in fact."
Art: http://PaulDRobertson.imagekind.com/

_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards