ARP and NDP Spoofing Defenses: DHCP Snooping, DAI, RA Guard, and What Hosts Can Do

Disclosure up front: I run IPYE, a company that leases IP space. It gets one short paragraph at the end; the rest is plain networking. ARP (IPv4) and Neighbor Discovery (IPv6) were designed for truste