A method of preventing ARP broadcast flooding of subscriber access links
where an ARP packet is received at a subscriber network edge device and
the source and destination information contained within the ARP packet is
compared to address lease information for subscribers of a subscriber
network. If the destination information obtained from the ARP packet is
not associated with an address lease assigned to one of the subscribers,
the network device only broadcasts the ARP packet to network uplinks. The
method further includes preventing subscribers of a subscriber network
from spoofing ARP responses by responding to an ARP request packet with
an ARP response packet containing false information. The ARP response
packet information is compared to address lease information for the
transmitting subscriber. If the source information obtained from the ARP
response packet corresponds to address lease information of the
transmitting subscriber the ARP response packet is accordingly forwarded.