Skip to main content

ARP

More
17 years 6 months ago #17850 by monavy
ARP was created by monavy
Reagrding ARP

if a host has to send a packet for which it does not have the cache, then it will broadcast an ARP request for the host on the same network.

but in case we have created multiple vlans and the destination host is in other vlan, what will the host request a broadcast for? the default gateway, or the destination?

please throw some light on it in details
More
17 years 6 months ago #17853 by Smurf
Replied by Smurf on topic Re: ARP
Hi there,

this will depend on if you have intervlan routing enabled. The way ARP works is that it is used to communicate on the Layer 2 of the OSI Model. Layer 3's IP Addressing is there for us so we can easily remember the addresses (and then DNS was brought out to make it easier so we don't need to remember the IP Addresses).

Anyhow, if machines are on the same subnet, a ARP broadcast would go out for the machine (because its in the same subnet), this would mean that they are also in the same VLAN. If the machine is in a different VLAN, then in order for it to communicate there must be some sort of routing between the VLAN's (either intervlan routing via a layer 3 switch or using a router to route between the VLAN's). If this is the case, then the machine would know its on a different subnet (because of its subnet mask) and would then have to go to the default gateway. If thats not in the ARP cache it would then ARP For the default gateway.

Hope that answers ya question

Cheers

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
More
17 years 2 weeks ago #21136 by ashok_nitc
Replied by ashok_nitc on topic Re: ARP
hi Smurf, i didn't get fully whatever you tried to say...!! according to the question i guess as cache entry is not there so it will broadcast for the destination.... and as destination is in different subnet so default gateway will come in to the picture!
More
17 years 2 weeks ago #21151 by Smurf
Replied by Smurf on topic Re: ARP
Hi,

The way a VLAN works is that it seperates the Broadcast Domain in order to reduce Broadcast traffic. In olden days, large networks suffered from broadcast traffic and once the number of machines hit a critical mass, the number of broadcasts started to impact the performance of the network.

VLAN's are a way of splitting this broadcast traffic down into seperate broadcast domains (usually setting differing network segments in the process).

If you have VLAN 2 with subnet 10.10.10.0/24 and VLAN 4 with subnet 10.10.11.0/24 then this is fine and all broadcast traffic on VLAN 4 will not be seen by VLAN 2 and vica versa.

Right, so whats my point. VLAN 4 and VLAN 2 cannot see broadcast traffic (or unicast traffic) or infact any traffic for each other. i.e. VLAN 4 cannot see ANY traffic on VLAN 2 and vica versa.

If we have a machine in VLAN 2 wanting to talk to a machine in VLAN 4, it would generally know that its a different Network ID using the Subnet Mask and realise that the traffic needs to be sent to a router to get to the other subnet. Thats basically what happens, if a Layer 3 switch wasn't used, a "Router on a stick" would probably be used to route between the vLANS.

Now, if you had setup two VLAN's within the same Network Segment (no idea why one would do this ?) it is still possible for this to work by using Proxy ARP but not really advisable as you are loosing the benefits of the VLAN in the first place.

Hope it answers the question better ?

Cheers

Wayne

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
More
17 years 2 weeks ago #21156 by ashok_nitc
Replied by ashok_nitc on topic Re: ARP
hea its clear!
More
17 years 2 weeks ago #21176 by krik
Replied by krik on topic Re: ARP

Now, if you had setup two VLAN's within the same Network Segment (no idea why one would do this ?) it is still possible for this to work by using Proxy ARP but not really advisable as you are loosing the benefits of the VLAN in the first place.


I'm not sure about that...

If you have configured two subnets on the same segment, your devices will still use the normal ARP behavior. Devices in subnet1 wanting to communicate with devices in subnet2 will still do ARP request for their default gateway to reach subnet2.

Proxy ARP is used when a device believe that the destination is on the same subnet because of a wrong netmask. For example, you have two subnets connected to a router. Subnet1 is 10.10.10.0/24 and subnet2 is 10.10.11.0/24. But a device in subnet1 has a wrong netmask (let's say /16). When this device want to communicate with a device in subnet2, it will send an ARP request for the destination because it believe it's on the same segment... And here the router will perform proxy ARP by answering to the ARP request with its own MAC address.

Christophe Lemaire
www.exp-networks.be/blog/
Time to create page: 0.153 seconds