Hi guys. We have a large network based on Catalyst 2900, 3600, 6500 series switches. they all are was set up as L2 and only 1 core switch Nexus 7k on the top as L3 for all vlans . The problem is when we deploy DAI on those L2 switches end users have a problem to get ip from Windows DHCP server connected to Nexus 7K . something like this :
Windows DNS/DHCPservers--------[Nexus ] -----------l2switch ----------l2switch--------------l2switch
all ports/computers on L2 switches are in vlan 1 . router for them is interface vlan 4 on core Nexus switch . DAI is enabled on L2 switches and on vlan 1 only .
1) I see L2 switches doesn't have IPs of computers connected to them on ARp cache , So IS IT RIGHT that DAI can't do ARP to IP bind and block dhcp request on untrusted ports? if DAI use arp to ip bind to allow trusted hosts but switch doesn't have IP so nothing is allowed ??
Ports of those users aren't in error-disable state , but they can't get ip, if i give static ip they work fine.
2)how can i resolve this problem ?
also is it possible to eliminate problem of getting new ip if I have second dhcp server as a backup server with second half of ip range , when first dhcp server will fail down second dhcp server will give new ips and DAI will probably block those users ... right ?
Thank you
