Page 70 of 630 Nortel IP Phone 2001553-3001-368 Standard 26.00 August 2007— Auto-Negotiate Capability: N— Auto-Negotiate Completed: NEnd of ProcedureGratuitous Address Resolution Protocol ProtectionGratuitous Address Resolution Protocol (GARP) Protection prevents theIP Phone 2001 from GARP Spoof attacks on the network. In a GARP Spoofattack, a malicious device on the network takes over an IP address (usuallythe default gateway) by sending unsolicited (or Gratuitous) ARP messages,thus manipulating the ARP table of the victim’s machine. The maliciousdevice launches a variety of attacks on the network, resulting in undesiredtraffic routing. For example, a GARP attack can convince the victim machinethat the malicious device is the default gateway. In this scenario, all trafficfrom the victim’s machine flows through the malicious device.To enable GARP Protection during configuration, see Procedure 1,“Configuring the IP Phone 2001” on page 52 or Procedure 1, “Installing anIP Phone 2001 for the first time using DHCP” on page 62.Extensible Authentication ProtocolExtensible Authentication Protocol (EAP) is a general protocol that fulfillsthe protocol requirements defined by 802.1x. For further information on802.1x, see Appendix Appendix C:: “802.1x Port-based network accesscontrol” on page 521.Reinstalling an IP Phone 2001You can reinstall an existing previously configured IP Phone 2001 on thesame system. For example, the IP Phone 2001 can be assigned to a new user(new TN) or to an existing user who moved to a new subnet by changing theTN of the IP Phone 2001.
