Preventing MITM via arp spoofing in ASA and IOS environment

[3moloz123]

We use a pair of 5515-X in which we route all traffic. We have a couple of 3560G which we use as L2 switches.

How can I secure my network to prevent clients from easily pose as the gateways in order to intercept traffic? I think PVLAN is out of the question with the ASA but I may be wrong.

Thanks

[jan.nielsen · Accepted solution]

Lookup the switch feature called dynamic arp inspection, and dhcp snooping