dhcp snooping + DAI configuration for AP port

[piotr.malek]

Hello Everyone

We try to implement the configuration of dhcp snooping + DAI configuration. I have question how we should configure ports where we have connected access points...

I was thinking that configuration should looks like this:

ip dhcp snooping trust
description AP aerohive
switchport mode trunk
switchport trunk allowed vlan 10,999
spanning-tree bpduguard enable
spanning-tree portfast trunk

but with that configuration we get errors like:

%SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Req) on Gi2/0/45,

Should this port have also ip arp inspection trust? 

[blefebvr1]

Did trusting the access port correct the issue ?

[MHM Cisco World]

why you want to config DHCP snooping and DAI in port toward AP ?

[blake5]

When connecting a voip phone to a port on the access point (VoIP vlan has dhcp snooping enabled, but the AP vlan does not) the switch will deny the dhcp request with the error “Invalid ARPs”