UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Gratuitous ARP must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-5618 NET0781 SV-5618r3_rule Medium
Description
A gratuitous ARP is an ARP broadcast in which the source and destination MAC addresses are the same. It is used to inform the network about a host IP address. A spoofed gratuitous ARP message can cause network mapping information to be stored incorrectly, causing network malfunction.
STIG Date
Perimeter L3 Switch Security Technical Implementation Guide - Cisco 2018-08-22

Details

Check Text ( C-3577r7_chk )
Review the configuration to determine if gratuitous ARP is disabled.

If gratuitous ARP is enabled, this is a finding.
Fix Text (F-5529r5_fix)
Disable gratuitous ARP on the device.