cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
265
Views
0
Helpful
1
Replies

DAI Configuration in Multi-Layer Switching Environment

rmujeeb81
Level 1
Level 1

Hi All,

I would like to know if we need to enable ip dhcp snooping and ip arp inspection on the core switch as well ? The switching design is a collapsed core with multiple access switches and there is a Microsoft DHCP server reachable through routing. Core switch is having SVIs for all user vlans and configured with ip helper-address command.

So kindly guide if we need to enable ip dhcp snooping and ip arp inspection globally on the core switch as well ( along with access switches ) for end user vlans ?

ip dhcp snooping trust and ip arp inspection trust is already configured on the trunk between access switches and core switch (both sides).

Thanks

1 Reply 1

Philip D'Ath
VIP Alumni
VIP Alumni

I guess if only trusted devices plug into the core and no users - no you don't.

Review Cisco Networking for a $25 gift card