UCF STIG Viewer Logo

Gratuitous ARP must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-5618 NET0781 SV-5618r3_rule Medium
Description
A gratuitous ARP is an ARP broadcast in which the source and destination MAC addresses are the same. It is used to inform the network about a host IP address. A spoofed gratuitous ARP message can cause network mapping information to be stored incorrectly, causing network malfunction.
STIG Date
Infrastructure Router Security Technical Implementation Guide Cisco 2018-11-27

Details

Check Text ( C-3577r7_chk )
Review the configuration to determine if gratuitous ARP is disabled.

If gratuitous ARP is enabled, this is a finding.
Fix Text (F-5529r5_fix)
Disable gratuitous ARP on the device.