Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Wifi router with arp spoofing protection

Apr 8, 2015 6:03AM PDT

Are there any Wifi routers that have integrated ARP spoofing protection?

I know that some Cisco switches support DAI (dynamic arp inspection) which prevents ARP spoofing by comparing ARP packets to the DHCP lease database, and does not forward "suspicious" packets. But I was not able to find any wifi routers with a similar option. Not even with options to drop unsolicited arp packets.

Discussion is locked

- Collapse -
Answer
I'm going to write Cisco.
Apr 9, 2015 1:41AM PDT
- Collapse -
thanks!
Apr 9, 2015 5:00AM PDT

thanks!

i asked because i was thinking about how public wifi hotspots (for example in restaurants) could protect their users if a user tries to do a man in the middle attack using arp spoof (attacking other clients).

and it seems that only enterprise class wifi equipment has capabilities to stop arp spoof attacks.

- Collapse -
How will that help?
Apr 9, 2015 5:06AM PDT

That is the old rogue WiFi free hot spot is still too easy to deploy and folk will fall for that far sooner and without nearly as much work as the issue you brought up.

Google the HAK5 Pineapple to see just how easy this is.
Bob