If you block arp packets you would basically render the LAN useless since every IP based machine is going to at minimum be needing to arp for the mac address of the router interface. Now if you are big into the hardcoding thing.... :)
On the 2950 switches we use the interface command port security max-mac-count x with the global command mac-address-table secure MAC_ADDRESS port vlan X, to filter arp from unwanted clients. I believe that the 3550 has the same funtionality.
HTH
Niels
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
