I tried ARP poison on my local test system with ettercap. It was successfully, so I decided to run a test on most secure systems, like Facebook and Google, but I could not reach them and they warned me: "The connection is not private". I know there are lots of IDS/IPS which can detect this attack and I was looking for the answer how to prevent ARP poison in case of my router. According the description I have to use static IP addressing and IP and MAC binding, but I need to use DHCP, because lots of devices are connecting via WIFI. Often arrive new devices to the network, therefore I can't use this technique. How can I prevent ARP poison in this case?
Additional information: my router type is TP-Link N600.