Difesa Layer 2 contro DHCP Spoofing, DHCP Starvation e ARP Poisoning. Porte trusted/untrusted, binding table, Dynamic ARP Inspection.