Method and apparatus for preventing ARP attacks

[0081] In order to implement the method for preventing an ARP attack in Embodiment 1 above, this embodiment of the present application provides an apparatus for preventing an ARP attack. see image 3 , the device includes: an ARP missing message receiving unit 301, a parameter set processing unit 302, and an ARP fake entry sending unit 303; wherein,

[0082] The ARP missing message receiving unit 301 is configured to receive the ARP missing message sent by the forwarding plane of the gateway device, and the ARP missing message is used to indicate that the forwarding plane fails to search the ARP table according to the destination Internet Protocol IP address of the data message;

[0083] In response to receiving the ARP missing message, the parameter set processing unit 302 is configured to determine whether the parameter set including the destination IP address has been saved;

[0084] The parameter set processing unit 302 is further configured to, when it is determined that th

[0092] In order to implement the method for preventing an ARP attack in Embodiment 1 above, an embodiment of the present application provides a gateway device, where the gateway device includes: a forwarding plane 101 and a control plane 102 . The forwarding plane 101 and the control plane 102 communicate through the bus 103, and the forwarding plane 101 may also communicate through the bus 103 or other buses and network interfaces.

[0093] The forwarding plane 101 is configured to receive a data message, search an ARP table according to the destination IP address of the data message, and when the search fails, send an ARP missing message to the control plane 102, the ARP missing message Including the destination IP address;

[0094] The control plane 102 is configured to receive the ARP missing message, and in response to receiving the ARP missing message, determine whether the control plane 102 has saved a parameter set including the destination IP address;

[0095] The contr