ip arp-spoof

Enables or disables ARP spoofing on an interface.

Syntax

[no] ip arp-spoof off|on

Syntax Description

Keyword	Description
no	(Optional) This is the same as ip arp-spoof off.
off	Disables ARP spoofing.
on	Enables ARP spoofing.

Defaults

ARP spoofing is disabled by default.

Usage Guidelines

When ARP spoofing is enabled, Island will send “spoofed” ARP responses to all clients presenting itself as the owner of the default gateway’s IP address.

ARP spoofing allows Island to insert itself into a network with an existing default gateway using a single interface. It forces all Internet-bound traffic from LAN clients to be sent to itself. Island will apply all configured security filters and other features before forwarding the packet to the actual default gateway.

This mode essentially provides all features of the Island without replacing an exiting gateway. However, it can cause problems with some hosts and security devices, and should therefore be used with caution.

This command is valid only in interface context. Entering it will set the interface mode to manual.

Examples

ip arp-spoof on

Related Commands

interfaceip autoconfig