UCF STIG Viewer Logo

Gratuitous ARP must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-5618 NET0781 SV-5618r3_rule Medium
Description
A gratuitous ARP is an ARP broadcast in which the source and destination MAC addresses are the same. It is used to inform the network about a host IP address. A spoofed gratuitous ARP message can cause network mapping information to be stored incorrectly, causing network malfunction.
STIG Date
Infrastructure L3 Switch - Cisco Security Technical Implementation Guide 2017-09-28

Details

Check Text ( C-3577r7_chk )
Review the configuration to determine if gratuitous ARP is disabled.

If gratuitous ARP is enabled, this is a finding.
Fix Text (F-5529r5_fix)
Disable gratuitous ARP on the device.