new Voice VLAN - IP ARP INSPECTION - DHCP SNOOPING

[hi.sadiki]

Hello,

Can anyone help please ?

I have IP phones  connected to a switch. Voice vlan 101.

I have ip Arp inspection and IP Dhcp snooping configured for the  voice vlan 101 also. That works perfectly.

This morning I had to change the voice vlan on switch ports from 101 to  the new voice vlan 102.  I forgot to change it on IP ARP Inspection and DHCP snooping.

My surprise is that my IP phones continued to be Pingable even if the new voice 102 vlan was not added to IP ARP Inspection and DHCP snooping.

Does anyone have an exlaination please ???

Many thanks

[Mahammadali Aghabayli]

Hi  Sadiki

If DHCP snooping and arp inspection not enabled on specified VLAN then switch will not check it.

Thanks,

Mahammadali Aghabayli.R

[Seb Rupik]

Hi there,

ARP inspection and DHCP snooping are security measures to prevent rogue devices from effecting normal traffic and being implemented is considered best practice. Not being enable on a VLAN won't stop it from functioning, just make it slightly more vulnerable.

cheers,

Seb.