Skip to content
Log In

The Arista router must be configured to have gratuitous ARP disabled on all external interfaces.

An XCCDF Rule

Description

A gratuitous ARP is an ARP broadcast in which the source and destination MAC addresses are the same. It is used to inform the network about a host IP address. A spoofed gratuitous ARP message can cause network mapping information to be stored incorrectly, causing network malfunction.

ID
SV-256030r882432_rule
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Disable gratuitous ARP on all external interfaces.

Disable

interface Ethernet 2
  no arp gratuitous accept