ARP spoofing actually in practice not easy to do. Enterprise class switches can snoop DHCP traffic and prevent forged ARP packets.