FreeBSD protects against ARP attacks

Because the operating system of the server needs to be replaced, and the earlier Windows 2003 was installed with the arpfirewall, there must also be a corresponding solution to prevent ARP attacks on FreeBSD. I checked a lot of information on the Internet. There are no more than two solutions. One is proprietary ARP protection software, and the other is to regularly bind internal network announcements to myself.

After comparison, the second solution is simple and flexible, and most of the solutions are available online. How to configure it? I will record the steps as follows based on my actual configuration method.

1. Obtain the local IP address and the MAC address of the NIC.
Reference
Ifconfig

The following information is displayed)
Reference
Re0: Flags = 8802 <broadcast, simplex, multicast> metric 0 MTU 1500
Options = 389b <rxcsum, txcsum, vlan_mtu, vlan_hwtagging, vlan_hwcsum, wol_ucast, wol_mcast, wol_magic>
Ether 00: 1f: D0: 6B: 0a: 60
Media: Ethernet Autoselect (none)
Status: no carrier
ATH0: Flags = 8843 <up, broadcast, running, simplex, multicast> metric 0 MTU 1500
Ether 00: 25: 86: 20: 48: 5A
Inet 192.168.1.3 netmask 0xffffff00 broadcast 192.168.1.255
Media: IEEE 802.11 Wireless Ethernet Autoselect (OFDM/48 Mbps)
Status: associated
SSID onnets Channel 11 (2462 MHz 11g) bssid 00: 1f: 33: 24: 88: 2C
Authmode open privacy off txpower 31.5 bmiss 7 scanvalid 60 bgscan
Bgscanintvl 300 bgscanidle 250 roam: rssi11g 7 roam: rate11g 5
Protmode CTS burst
Plip0: Flags = 108810 <pointopoint, simplex, multicast, needsgiant> metric 0 MTU 1500
Lo0: Flags = 8049 <up, loopback, running, multicast> metric 0 MTU 16384
Inet6 fe80: 1% lo0 prefixlen 64 scopeid 0x4
Inet6: 1 prefixlen 128
Inet 127.0.0.1 netmask 0xff000000

Note that the areas in red and bold are Nic interface names, MAC addresses, and IP addresses. Write the Mac-IP relationship to a file:
Reference
Echo 192.168.1.3 00: 25: 86: 20: 48: 5A>/etc/arp_ipmac.conf

2. Regularly bind Mac and broadcast to the Intranet
Reference
Crontab-e

Enter and save the following content:
Reference
*/1 *****/usr/sbin/ARP-F/etc/arp_ipmac.conf

This means that the IP address and MAC address are bound and broadcast once every minute. You can adjust the time interval according to your actual situation.