
Explore how proxy arp, ip redirects, and ip directed broadcasts work on Cisco routers, their security risks, and practical mitigations using Gns3, show and debug commands.
See how two hosts without a default gateway can communicate through a router between them, via proxy ARP, using 192.168.1.1 and 192.168.1.200 on a /26.
Explore proxy ARP on Cisco routers: how the router answers ARP requests on behalf of another host, enabling hosts to reach each other through the router.
Explore how proxy ARP lets a host use a default gateway outside its subnet, shown by enabling proxy ARP on a router and achieving successful pings.
Learn why routing is necessary for proxy ARP to reach remote networks. See static routes and next-hop configuration, and how default gateways and ARP cache affect connectivity.
Analyze the disadvantages of proxy ARP on hosts, highlighting ARP cache consumption due to entries for final destinations, and show how default gateways reduce cache load.
Configure a default gateway and adjust the subnet mask to bypass proxy ARP, reducing ARP cache entries and improving performance by saving memory and bandwidth.
Examine the ARP cache impact of static routes on routers, weigh local exit interface vs next hop routing, and learn to combine both to reduce recursion time and ARP load.
Explore the drawbacks of proxy ARP, including ARP cache exhaustion and potential DDoS or MiTM attacks, illustrated through route manipulation and ARP debugging scenarios.
Explore proxy ARP usage cases that enable transparent subnetting, host filtering without changing masks, and connecting remote hosts to a LAN by presenting the same address range.
Explore how ICMP redirects optimize routing on Cisco routers by dynamically guiding hosts from a suboptimal path to the direct gateway, with hands-on configuration and activation conditions.
Explore ICMP redirects to improve routing by steering subsequent packets through the optimal path, then examine drawbacks such as host routing table growth and security risks from dissimilar devices.
Explore the ICMP redirect attack, where an attacker spoofs a gateway to reroute traffic through a malicious path, enabling a man-in-the-middle.
Examine the IP smurfing attack using IP directed broadcasts and spoofed ICMP replies, causing a DDoS; learn to stop it by disabling the feature or enabling unicast reverse path forwarding.
It is crucial for network engineers to understand how networking protocols work in depth. This will help them to configure and operate networks effectively and be distinguished from other engineers who do not possess this understanding.
This type of knowledge is also important for network architects. It will allow them to design networks that consist of parts that work together in harmony.
This course will help you understand some behaviors that seem strange or unusual in networking, such as hosts that do not use a default gateway to communicate with other subnets. You will understand how such things happen.
You will understand the mechanisms of some important IP features, such as Proxy ARP, IP redirects, and IP directed Broadcasts.
You will understand the disadvantages and security issues related to these features, the attacks that they allow, and how to mitigate them.
This course focuses on the practical side as much as possible, using Cisco routers emulated in GNS3. We will deep dive into protocols' behaviors with show and debug commands.
For example, we will see how the Proxy ARP feature allows hosts that do not have a default gateway configured to communicate with other subnets or to use a default gateway that is located outside their own subnet. We will see how this feature affects the cache of the devices and therefore will understand what is the best way to configure static routing. Additionally, we will see how both the DOS (denial of service) and MiTM (Man in the middle) attacks take advantage of the Proxy ARP feature. However, this feature was not there without a reason, so its usage cases will be explained.
Another example is how the IP directed Broadcast feature allows for the IP Smurfing attack to occur and how we can mitigate this attack using the uRPF (unicast Reverse Path Forwarding) mechanism.