A switch security feature that validates the contents of ARP packets to prevent ARP spoofing attacks.
It checks incoming ARP packets against a table of legitimate IP-to-MAC address mappings built from DHCP Snooping, discarding any packet that doesn't match. This feature assumes it's used together with DHCP Snooping.
© 2026 ITBGM