Secure your internal Layer 2 network against ARP poisoning attacks. This tutorial covers passive monitoring with Arpwatch on Linux and active mitigation using Dynamic ARP Inspection and DHCP Snooping on managed switches.