@YuriyB 

Hi,

I don't know what's the problem here, but I have used the MAC-IP bind just literaly yesterday and it worked like a charm. On ER605 v2.

Cheers.

  @RaRu Hi, problem is that someone else's device can assign specific IP (that has MAC binding on er605) and have access to whole network

What is purpose of ARP-MAC binding if it does not work?

ARP Spoofing Defense Enabled. 

IP-MAC Binding enabled.

bind device 192.168.6.10  to AC-80-FB-65-90-A7

on another pc with mac 00-15-5D-12-1A-00 i manually assign 192.168.6.10

router accept it and everything works! no ARP attack detected?

so ACL rules+bandwidth control+policy routing rules does not matter anything

what is purpose of ARP defence???