Dynamic ARP Inspection

A switch feature that drops ARP replies that don't match the addresses DHCP handed out, which blocks ARP poisoning.