arp spoofing

[bbaccsi]

hi

is there a(n easy) way to make the router arp-spoofing-proof?
I mean there's the arpwatch of course, but it's more a detective than a preventive control...

[dadittoz]

There's a topic in russian forum about it. According to it, adding this to /usr/local/sbin/post-boot should do the trick

ip neigh add 10.1.1.1 lladdr 00:11:22:33:44:55 nud permanent dev vlan1

where's 10.1.1.1 is an ip address you want to have fixed arp
00:11:22:33:44:55 - mac address
and vlan1 is the interface

[bbaccsi]

Спасибо!