For ARP protection to function properly, which other feature should also be implemented?