www.zyxel.com
8.1.3 How to set ARP inspection?
Overview
This feature prevent ARP spoofing from the network to secure L2 forwarding, it
contains a DHCP snooping table which can match and check which IP address is
allowed to access the network, if It's not the traffic will be blocked and classified
to blacklist.
Topology,
Note: in this scenario assume that there's attacker want to join the network, but
the switch is configured with ARP inspection so that it will detect and match the
white list (DHCP snooping table) first, if the MAC address doesn't match the table
it will be blocked and classified to blacklist.
86/100