place static arp entries on servers workstation and routers

How do you defend against ARP Spoofing?