It really just requires a network that doesn't use some kind of NAC since you can trivially do ARP poisoning of your target.