Lab 9.8.

1: Address Resolution Protocol (ARP) (Instructor Version)

Topology iagra!
Addressing Table
e"ice Inter#ace IP Address $ubnet %as& e#ault 'ate(ay
R1)I$P
S0/0/0 10.10.10.6 255.255.255.252 N/A
Fa0/0 192.168.254.253 255.255.255.0 N/A
R*)+entral
S0/0/0 10.10.10.5 255.255.255.252 10.10.10.6
Fa0/0 172.16.255.254 255.255.0.0 N/A
,agle $er"er
N/A
192.168.254.254 255.255.255.0 192.168.254.253
N/A
172.31.24.254 255.255.255.0 N/A
-ostPod#A
N/A
172.16.Pod#.1 255.255.0.0 172.16.255.254
-ostPod#.
N/A
172.16.Pod#.2 255.255.0.0 172.16.255.254
$1)+entral
N/A
172.16.254.1 255.255.0.0 172.16.255.254
Learning /b0ecti"es
Upon completion of this la! "o# $ill e ale to%
All contents a&e 'op"&i(ht ) 1992*2007 'isco S"stems! +nc. All &i(hts &ese&,e-. .his -oc#ment is 'isco /#lic +nfo&mation. /a(e 1 of 8
''NA 01plo&ation
Net$o&2 F#n-amentals% 0the&net 3a 9.8.1% A--&ess 4esol#tion /&otocol 5A4/6
Use 7in-o$s arp comman-.
Use 7i&esha&2 to e1amine A4/ e1chan(es.
.ac&ground
A--&ess 4esol#tion /&otocol 5A4/6 is #se- " .'//+/ to map a 3a"e& 3 +/ a--&ess to a 3a"e& 2 8A'
a--&ess. 7hen a f&ame is place- on the net$o&2! it m#st ha,e a -estination 8A' a--&ess. .o
-"namicall" -isco,e& the 8A' a--&ess to the -estination -e,ice! an A4/ &e9#est is &oa-cast on the
3AN. .he -e,ice that contains the -estination +/ a--&ess &espon-s! an- the 8A' a--&ess is &eco&-e- in
A4/ cache. 0,e&" -e,ice on the 3AN 2eeps its o$n A4/ cache! o& small a&ea in 4A8 that hol-s A4/
&es#lts. An A4/ cache time& &emo,es A4/ ent&ies that ha,e not een #se- fo& a ce&tain pe&io- of time.
:epen-in( on the -e,ice! times -iffe&. Fo& e1ample! some 7in-o$s ope&atin( s"stems sto&e A4/ cache
ent&ies fo& 2 min#tes. +f the ent&" is #se- a(ain -#&in( that time! the A4/ time& fo& that ent&" is e1ten-e-
to 10 min#tes.
A4/ is an e1cellent e1ample in pe&fo&mance t&a-eoff. 7ith no cache! A4/ m#st contin#all" &e9#est
a--&ess t&anslations each time a f&ame is place- on the net$o&2. .his a--s latenc" to the comm#nication
an- co#l- con(est the 3AN. 'on,e&sel"! #nlimite- hol- times co#l- ca#se e&&o&s $ith -e,ices that lea,e
the net$o&2 o& chan(e the 3a"e& 3 a--&ess.
A net$o&2 en(inee& nee-s to e a$a&e of A4/ #t ma" not inte&act $ith the p&otocol on a &e(#la& asis.
A4/ is a p&otocol that enales net$o&2 -e,ices to comm#nicate $ith the .'//+/ p&otocol. 7itho#t A4/!
the&e is no efficient metho- to #il- the -ata(&am 3a"e& 2 -estination a--&ess. Also! A4/ is a potential
sec#&it" &is2. A4/ spoofin(! o& A4/ poisonin(! is a techni9#e #se- " an attac2e& to in;ect the $&on(
8A' a--&ess association in a net$o&2. An attac2e& fo&(es the 8A' a--&ess of a -e,ice! an- f&ames a&e
sent to the $&on( -estination. 8an#all" confi(#&in( static A4/ associations is one $a" to p&e,ent A4/
spoofin(. Finall"! an a#tho&i<e- 8A' a--&ess list ma" e confi(#&e- 'isco -e,ices to &est&ict net$o&2
access to onl" app&o,e- -e,ices.
$cenario
7ith a po- host comp#te&! #se the 7in-o$s arp #tilit" comman- to e1amine an- chan(e A4/ cache
ent&ies.
+n .as2 2! 7i&esha&2 $ill e #se- to capt#&e an- anal"<e A4/ e1chan(es et$een net$o&2 -e,ices. +f
7i&esha&2 has not een loa-e- on the host po- comp#te&! it can e -o$nloa-e- f&om U43
ftp://eagle-server.example.com/pub/eagle_labs/eagle1/chapter9/! file wireshark-
setup-0.99.4.exe.
:epen-in( on the class&oom sit#ation! the la topolo(" ma" ha,e een mo-ifie- efo&e this class. +t is
est to #se one host to ,e&if" inf&ast&#ct#&e connecti,it". +f the -efa#lt $e pa(e cannot e accesse- f&om
ea(le=se&,e&.e1ample.com! t&o#leshoot en-=to=en- net$o&2 connecti,it"%
1. >e&if" that all net$o&2 e9#ipment is po$e&e- on! an- ea(le=se&,e& is on.
2. F&om a 2no$n (oo- host comp#te&! pin( ea(le=se&,e&. +f the pin( test fails! pin( S1='ent&al! 42=
'ent&al! 41=+S/! an- finall" ea(le=se&,e&. .a2e co&&ecti,e action on -e,ices that fail pin( tests.
3. +f an in-i,i-#al host comp#te& cannot connect to ea(le=se&,e&! chec2 the cale connection
et$een the host an- S1='ent&al. >e&if" that the host comp#te& has the co&&ect +/ a--&ess!
sho$n in the lo(ical a--&essin( tale ao,e! an- can pin( 42='ent&al! 172.16.255.254. >e&if"
that the host comp#te& has the co&&ect ?ate$a" +/ a--&ess! 172.16.255.254! an- can pin( 41=
+S/! 10.10.10.6. Finall"! ,e&if" that the host has the co&&ect :NS a--&ess! an- can pin( ea(le=
se&,e&.e1ample.com.
All contents a&e 'op"&i(ht ) 1992*2007 'isco S"stems! +nc. All &i(hts &ese&,e-. .his -oc#ment is 'isco /#lic +nfo&mation. /a(e 2 of 8
''NA 01plo&ation
Net$o&2 F#n-amentals% 0the&net 3a 9.8.1% A--&ess 4esol#tion /&otocol 5A4/6
Tas& 1: 1se t-e 2indo(s arp +o!!and.
$tep 1: Access t-e 2indo(s ter!inal.
C:\ arp
"ispla#s a$% mo%ifies the &'-to-'h#sical a%%ress tra$slatio$ tables
use% b# a%%ress resolutio$ protocol ()*'+.
)*' -s i$et_a%%r eth_a%%r ,if_a%%r-
)*' -% i$et_a%%r ,if_a%%r-
)*' -a ,i$et_a%%r- ,-. if_a%%r-
-a "ispla#s curre$t )*' e$tries b# i$terrogati$g the curre$t
protocol %ata. &f i$et_a%%r is specifie%/ the &' a$%
'h#sical a%%resses for o$l# the specifie% computer are
%ispla#e%. &f more tha$ o$e $etwork i$terface uses )*'/
e$tries for each )*' table are %ispla#e%.
-g 0ame as -a.
i$et_a%%r 0pecifies a$ i$ter$et a%%ress.
-. if_a%%r "ispla#s the )*' e$tries for the $etwork i$terface
specifie% b# if_a%%r.
-% "eletes the host specifie% b# i$et_a%%r. i$et_a%%r ma# be
wil%car%e% with 1 to %elete all hosts.
-s )%%s the host a$% associates the &$ter$et a%%ress i$et_a%%r
with the 'h#sical a%%ress eth_a%%r. 2he 'h#sical a%%ress
is give$ as 3 hexa%ecimal b#tes separate% b# h#phe$s. 2he
e$tr# is perma$e$t.
eth_a%%r 0pecifies a ph#sical a%%ress.
if_a%%r &f prese$t/ this specifies the &$ter$et a%%ress of the
i$terface whose a%%ress tra$slatio$ table shoul% be
mo%ifie%. &f $ot prese$t/ the first applicable i$terface
will be use%.
4xample:
arp -s 156.55.75.818 00-aa-00-38-c3-09 .... )%%s a static e$tr#.
arp -a .... "ispla#s the arp table.
C:\
3igure 1. arp +o!!and $ynta4
1. @pen a 7in-o$s te&minal " clic2in( $tart 5 Run. ."pe cmd! an- clic2 /6.
7ith no options! the arp comman- $ill -ispla" #sef#l help info&mation. See Fi(#&e 1.
2. +ss#e the arp comman- on the po- host comp#te&! an- e1amine the o#tp#t.
3. Ans$e& the follo$in( 9#estions ao#t the arp comman-%
7hat comman- $o#l- e #se- to -ispla" all ent&ies in A4/ cacheA
BBBBBBBBarp -aBBBBBBBBBBBBBBBBBBBBBBBBB
7hat comman- $o#l- e #se- to -elete all A4/ cache ent&ies 5fl#sh A4/ cache6A
BBBBBBBB arp d *BBBBBBBBBBBBBBBBBBBBBBBB
7hat comman- $o#l- e #se- to -elete the A4/ cache ent&" fo& 172.16.255.254A
BBBBB arp d 172.16.255.254BBBBBBBBBBBBBB
All contents a&e 'op"&i(ht ) 1992*2007 'isco S"stems! +nc. All &i(hts &ese&,e-. .his -oc#ment is 'isco /#lic +nfo&mation. /a(e 3 of 8
''NA 01plo&ation
Net$o&2 F#n-amentals% 0the&net 3a 9.8.1% A--&ess 4esol#tion /&otocol 5A4/6
$tep *: 1se t-e arp co!!and to e4a!ine local ARP cac-e.
C:\ arp -a
.o )*' 4$tries 9ou$%
C:\
3igure *. ,!pty ARP +ac-e
7itho#t an" net$o&2 comm#nication! the A4/ cache sho#l- e empt". .his is sho$n in Fi(#&e 2.
+ss#e the comman- that -ispla"s A4/ ent&ies. 7hat a&e the &es#ltsA
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
A4/ cache sho#l- e empt". An" ent&" in-icates comm#nication et$een the po- host comp#te& an-
othe& net$o&2 -e,ices.
$tep 7: 1se t-e ping co!!and to dyna!ically add entries in t-e ARP cac-e.
.he ping comman- can e #se- to test net$o&2 connecti,it". C" accessin( othe& -e,ices! A4/
associations a&e -"namicall" a--e- to A4/ cache.
C:\ ping 172.16.1.2
'i$gi$g 168.13.1.8 with :8 b#tes of %ata:
*epl# from 168.13.1.8: b#tes;:8 time<1ms 22=;187
*epl# from 168.13.1.8: b#tes;:8 time<1ms 22=;187
*epl# from 168.13.1.8: b#tes;:8 time<1ms 22=;187
*epl# from 168.13.1.8: b#tes;:8 time<1ms 22=;187
'i$g statistics for 168.13.1.8:
'ackets: 0e$t ; 4/ *eceive% ; 4/ =ost ; 0 (0> loss+/
)pproximate rou$% trip times i$ milli-seco$%s:
?i$imum ; 0ms/ ?aximum ; 0ms/ )verage ; 0ms
C:\
3igure 7. ping +o!!and to a Pod 8ost +o!puter
1. Use the comman- ipconfig /all to ,e&if" the po- host comp#te&Ds 3a"e& 2 an- 3a"e& 3
info&mation.
2. +ss#e the ping comman- to anothe& po- host comp#te&! sho$n in Fi(#&e 3. Fi(#&e 4 sho$s the
ne$ A4/ cache ent&".
C:\ arp -a
&$terface: 168.13.1.1 --- 0x30004
&$ter$et )%%ress 'h#sical )%%ress 2#pe
168.13.1.8 00-10-a4-6b-01-5f %#$amic
C:\
3igure 9. isplay o# ARP +ac-e
Eo$ $as the A4/ ent&" a--e- to the A4/ cacheA Eint% &e,ie$ the ."pe col#mn.
BBB:"namicBBBBBBBBBBBBBBBBBBB
7hat is the ph"sical a--&ess of the -estination po- host comp#te&A
BBBAns$e&s $ill ,a&".BBBBBBBBBBB
All contents a&e 'op"&i(ht ) 1992*2007 'isco S"stems! +nc. All &i(hts &ese&,e-. .his -oc#ment is 'isco /#lic +nfo&mation. /a(e 4 of 8
''NA 01plo&ation
Net$o&2 F#n-amentals% 0the&net 3a 9.8.1% A--&ess 4esol#tion /&otocol 5A4/6
7hat is the ph"sical a--&ess of the -estination po- host comp#te&A
IP Address P-ysical Address 8o( isco"ered:
Ans$e&s $ill ,a&". Ans$e&s $ill ,a&". :"namic
3. :o not sen- an" t&affic to the comp#te& accesse- p&e,io#sl". 7ait et$een 2 an- 3 min#tes! an-
chec2 A4/ cache a(ain. 7as the A4/ cache ent&" clea&e-A BBBBBBBBBB Fes. +f the ent&" $as
not clea&e-! the&e a&e a co#ple possile e1planations. Fi&st! the st#-ent -i- not $ait 2 min#tes!
$hich is the time A4/ cache sto&es an initial ent&". @&! the st#-ent accesse- the -estination
-e,ice mo&e than once -#&in( the 2=min#te timeo#t $in-o$! an- ca#se- the A4/ timeo#t fo& the
ent&" to &ise to 10 min#tes.
4. +ss#e the ping comman- to the ?ate$a"! 42='ent&al. 01amine A4/ cache ent&". 7hat is the
ph"sical a--&ess of the ?ate$a"A BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
IP Address P-ysical Address 8o( isco"ered:
172.16.255.254 Ans$e&s $ill ,a&". :"namic
5. +ss#e the ping comman- to 0a(le Se&,e&! ea(le=se&,e&.e1ample.com. 01amine A4/ cache
ent&". 7hat is the ph"sical a--&ess of 0a(le Se&,e&A BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
'annot e -ete&mine-. Ceca#se 0a(le Se&,e& is on a -iffe&ent net$o&2! onl" the ?ate$a" 8A'
a--&ess $ill e -ispla"e-.
$tep 9: %anually ad0ust entries in t-e ARP cac-e.
.o -elete ent&ies in A4/ cache! iss#e the comman- arp d {inet-addr | *}. A--&esses can e
-elete- in-i,i-#all" " specif"in( the +/ a--&ess! o& all ent&ies can e -elete- $ith the $il-ca&- *.
>e&if" that the A4/ cache contains t$o ent&ies% one fo& the ?ate$a" an- one to the -estination po- host
comp#te&. +t ma" e easie& to pin( oth -e,ices mo&e than once! $hich $ill &etain the cache ent&" fo&
app&o1imatel" 10 min#tes.
C:\ arp a
&$terface: 168.13.1.1 --- 0x30004
&$ter$et )%%ress 'h#sical )%%ress 2#pe
168.13.1.8 00-10-a4-6b-01-5f %#$amic
168.13.855.854 00-0c-75-cf-33-40 %#$amic
C:\
C:\arp -d 172.16.255.254
C:\ arp -a
&$terface: 168.13.1.1 --- 0x30004
&$ter$et )%%ress 'h#sical )%%ress 2#pe
168.13.1.8 00-10-a4-6b-01-5f %#$amic
C:\
3igure ;. %anually Re!o"ing an ARP +ac-e ,ntry
See Fi(#&e 5! $hich sho$s ho$ to man#all" -elete an A4/ cache ent&".
1. @n "o#& comp#te&! fi&st ,e&if" that the t$o ent&ies a&e p&esent. +f not! pin( the missin( ent&".
2. Ne1t! -elete the ent&" fo& the po- host comp#te&.
3. Finall"! ,e&if" "o#& chan(e.
All contents a&e 'op"&i(ht ) 1992*2007 'isco S"stems! +nc. All &i(hts &ese&,e-. .his -oc#ment is 'isco /#lic +nfo&mation. /a(e 5 of 8
''NA 01plo&ation
Net$o&2 F#n-amentals% 0the&net 3a 9.8.1% A--&ess 4esol#tion /&otocol 5A4/6
4. 4eco&- the t$o A4/ cache ent&ies%
e"ice IP Address P-ysical Address 8o( isco"ered:
/o- Eost
'omp#te&
Ans$e&s $ill ,a&". Ans$e&s $ill ,a&". :"namic
?ate$a" 172.16.255.254 Ans$e&s $ill ,a&". :"namic
5. 7&ite the comman- that $ill -elete the ent&" fo& the po- host comp#te&%
BBBB arp d i$et-a%%r BBBBBBBBBBBBBBB
6. +ss#e the comman- on "o#& po- host comp#te&. 4eco&- the &emainin( A4/ cache ent&"%
e"ice IP Address P-ysical Address 8o( isco"ered:
?ate$a" 172.16.255.254 Ans$e&s $ill ,a&". :"namic
7. Sim#late &emo,in( all ent&ies. 7&ite the comman- that $ill -elete all ent&ies in A4/ cache%
BBB arp d *BBBBBBBBBBBBBBBBBBBBBBBB
8. +ss#e the comman- on "o#& po- host comp#te&! an- e1amine the A4/ cache $ith the comman-
arp -a. All ent&ies sho#l- e &emo,e-. BB No A4/ 0nt&ies Fo#n- BBBBBBBBB
9. 'onsi-e& a sec#&e en,i&onment $he&e the ?ate$a" cont&ols access to a $e se&,e& that contains
.op Sec&et info&mation. 7hat is one la"e& of sec#&it" that can e applie- to A4/ cache ent&ies
that co#l- ai- in co#nte&in( A4/ spoofin(A BB A-- a static A4/ ent&" fo& the ?ate$a".BBBBBB
10. 7&ite the comman- that $ill a-- a static A4/ ent&" fo& the ?ate$a" to A4/ cache%
BBB arp <s 1=*.1>.*;;.*;9 MAC-address BBBBBBBBB
11. 01amine the A4/ cache a(ain! an- fill in the follo$in( tale%
IP Address P-ysical Address Type
172.16.255.254 Ans$e&s $ill ,a&". Static
Fo& the ne1t tas2! 7i&esha&2 $ill e #se- to capt#&e an- e1amine an A4/ e1chan(e. :o not close the
7in-o$s te&minalGit $ill e #se- to ,ie$ the A4/ cache.
Tas& *: 1se 2ires-ar& to ,4a!ine ARP ,4c-anges .
$tep 1: +on#igure 2ires-ar& #or pac&et captures.
/&epa&e 7i&esha&2 fo& capt#&es.
1. 'lic2 +apture 5 /ptions.
2. Select the +nte&face that co&&espon-s to the 3AN.
3. 'hec2 the o1 to Up-ate list of pac2ets in &eal time.
4. 'lic2 $tart.
.his $ill e(in the pac2et capt#&e.
$tep *: Prepare t-e pod -ost co!puter #or ARP captures.
1. +f not al&ea-" complete-! open a 7in-o$s te&minal $in-o$ " clic2in( $tart 5 Run. ."pe cmd!
an- clic2 /6.
2. Fl#sh the A4/ cache! $hich $ill &e9#i&e A4/ to &e-isco,e& a--&ess maps. 7&ite the comman-
that "o# #se-% BBBBB arp d *BBBBBBBBBBBBBBB
All contents a&e 'op"&i(ht ) 1992*2007 'isco S"stems! +nc. All &i(hts &ese&,e-. .his -oc#ment is 'isco /#lic +nfo&mation. /a(e 6 of 8
''NA 01plo&ation
Net$o&2 F#n-amentals% 0the&net 3a 9.8.1% A--&ess 4esol#tion /&otocol 5A4/6
$tep 7: +apture and e"aluate ARP co!!unication.
+n this step! one pin( &e9#est $ill e sent to the ?ate$a"! an- one pin( &e9#est $ill e sent to 0a(le
Se&,e&. Afte&$a&-! 7i&esha&2 capt#&e $ill e stoppe- an- the A4/ comm#nication e,al#ate-.
1. Sen- one pin( &e9#est to the ?ate$a"! #sin( the comman- ping n 1 172.16.255.254.
2. Sen- one pin( &e9#est to 0a(le Se&,e&! #sin( the comman- ping n 1 192.168.254.254.
3igure >. 2ires-ar& +apture o# ARP +o!!unication
3. Stop 7i&esha&2 an- e,al#ate the comm#nication. Fo# sho#l- see a 7i&esha&2 sc&een simila& to
the sc&een sho$n in Fi(#&e 6. .he 7i&esha&2 /ac2et list $in-o$ -ispla"s the n#me& of pac2ets
capt#&e-. .he /ac2et :etails 7in-o$ sho$s A4/ p&otocol contents.
4. Usin( "o#& 7i&esha&2 capt#&e! ans$e& the follo$in( 9#estions%
7hat $as the fi&st A4/ pac2etA BBBBBa 4e9#estBBBBBBBBBBBBBBBB
7hat $as the secon- A4/ pac2etA BBa 4epl"BBBBBBBBBBBBBBBBBBBBBBBBBBBB
Fill in the follo$in( tale $ith info&mation ao#t the fi&st A4/ pac2et%
3ield Value
Sen-e& 8A' a--&ess Ans$e&s $ill ,a&"
Sen-e& +/ a--&ess Ans$e&s $ill ,a&"
.a&(et 8A' a--&ess 00%00%00%00%00%00
.a&(et +/ a--&ess 172.16.255.254
Fill in the follo$in( tale $ith info&mation ao#t the secon- A4/ pac2et%
3ield Value
Sen-e& 8A' a--&ess Ans$e&s $ill ,a&"
Sen-e& +/ a--&ess 172.16.255.254
.a&(et 8A' a--&ess Ans$e&s $ill ,a&"
.a&(et +/ a--&ess Ans$e&s $ill ,a&"
All contents a&e 'op"&i(ht ) 1992*2007 'isco S"stems! +nc. All &i(hts &ese&,e-. .his -oc#ment is 'isco /#lic +nfo&mation. /a(e 7 of 8
''NA 01plo&ation
Net$o&2 F#n-amentals% 0the&net 3a 9.8.1% A--&ess 4esol#tion /&otocol 5A4/6
+f the 0the&net ++ f&ame fo& an A4/ &e9#est is a &oa-cast! $h" -oes the .a&(et 8A' a--&ess
contain all sA BBBB .he A4/ p&otocol has no ,al#e "et to p#t in the fiel-.BBBBBBBBBBBBBBBBBB
7h" $as the&e no A4/ &e9#est fo& the pin( to 0a(le Se&,e&A BBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
.he .'//+/ p&otocol al&ea-" ha- the 8A' a--&ess fo& the ?ate$a"! $hich is #se- to fo&$a&- the
pac2et o#tsi-e the 3AN.
Eo$ lon( sho#l- the ?ate$a" mappin( e sto&e- in A4/ cache on the po- host comp#te&A 7h"A
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
10 min#tes! eca#se the cache ent&" $as accesse- $ithin the 2=min#te cache timeo#t. .his set
the ne$ timeo#t ,al#e to 10 min#tes.
Tas& 7: Re#lection
.he A4/ p&otocol maps 3a"e& 3 +/ a--&esses to 3a"e& 2 8A' a--&esses. +f a pac2et m#st mo,e ac&oss
net$o&2s! the 3a"e& 2 8A' a--&ess chan(es $ith each hop ac&oss a &o#te&! #t the 3a"e& 3 a--&ess
ne,e& chan(es.
A4/ cache sto&es A4/ a--&ess mappin(s. +f the ent&" $as lea&ne- -"namicall"! it $ill e,ent#all" e
-elete- f&om cache. +f the ent&" $as man#all" inse&te- in A4/ cache! it is a static ent&" an- $ill &emain
#ntil the comp#te& is t#&ne- off o& the A4/ cache is man#all" fl#she-.
Tas& 9: +-allenge
Usin( o#tsi-e &eso#&ces! pe&fo&m a sea&ch on A4/ spoofin(. :isc#ss se,e&al techni9#es #se- to co#nte&
this t"pe of attac2.
8ost $i&eless &o#te&s s#ppo&t $i&eless net$o&2 access. Usin( this techni9#e! 8A' a--&esses that a&e
pe&mitte- access to the $i&eless net$o&2 a&e man#all" a--e- to the $i&eless &o#te&. Usin( o#tsi-e
&eso#&ces! -isc#ss the a-,anta(es of confi(#&in( $i&eless net$o&2 access. :isc#ss $a"s that attac2e&s
can ci&c#m,ent this sec#&it".
Tas& ;: +lean 1p
7i&esha&2 $as installe- on the po- host comp#te&. +f 7i&esha&2 nee-s to e #ninstalle-! clic2 $tart 5
+ontrol Panel. @pen Add or Re!o"e Progra!s. Ei(hli(ht 7i&esha&2! an- clic2 Re!o"e.
4emo,e an" files c&eate- on the po- host comp#te& -#&in( the la.
Unless -i&ecte- othe&$ise " the inst&#cto&! t#&n off po$e& to the host comp#te&s. 4emo,e an"thin( that
$as &o#(ht into the la! an- lea,e the &oom &ea-" fo& the ne1t class.
All contents a&e 'op"&i(ht ) 1992*2007 'isco S"stems! +nc. All &i(hts &ese&,e-. .his -oc#ment is 'isco /#lic +nfo&mation. /a(e 8 of 8