Hi 
Is it possible to implement some script which can compare current arp 
table and DHCP static maping table and if they are different for some 
IP (currently active) block these IP on firewall. (flush rule if OK). It can 
prvent LAN side users to use IP adrress as they wish.
Maybe somebody did it?

Regards 
KS
    //// ////    /////\\\\\                           
   ///////      ///// Krzysztof Syguda  
  //// \\\      \\\\\ tel.  +48 607223304
 ////   \\\\\\\\\\\\/ 
                      e-mail: krzys at wroclaw dot dialog dot net dot pl                    
Thought for the day:
    Intuition (n): an uncanny sixth sense which tells people 
    that they are right, whether they are or not.