Invalid ARPs (Req) when upgrade switch 2960x

[fbabashahi]

Hi 

There it is , to these ports IP Phones are connected.

1 Invalid ARPs (Req) on Gi1/0/18, vlan 109.([a036.bc29.84fd/192.168.109.74/0000.0000.0000/192.168.109.66/19:09:52 TEH Tue Feb 13 2024])

1 Invalid ARPs (Req) on Gi1/0/23, vlan 109.([047c.167c.7eb2/192.168.109.54/0000.0000.0000/192.168.109.1/19:09:52 TEH Tue Feb 13 2024])

1 Invalid ARPs (Req) on Gi1/0/18, vlan 109.([a036.bc29.84fd/192.168.109.74/0000.0000.0000/192.168.109.1/19:09:52 TEH Tue Feb 13 2024])

Thank you

[balaji.bandi]

what was the IOS version before and what version you upgraded to, how was your configuration looks like :

worth looking below information see if that fix your issue :

https://community.cisco.com/t5/networking-knowledge-base/the-quot-sw-dai-4-dhcp-snooping-deny-quot-error-message-is/ta-p/3132652

[fbabashahi]

Hi

Config is right ip dhcp snooping and arp inspection configured and these devices are connected to the switches without any problem , i see these messages when reloading the switches

[fbabashahi]

Hello 

I have some 2960x-tsl switches , there are hub-switches and IP phones are connected to a few of them  , my problem is when upgrade switches after reload these ports show    Invalid ARPs (Req) on  continuously and i have to turn phones and switches off and on to solve the problem, how can i prevent this ?

 appreciate for your help

[marce1000]

 - Could you show the complete error message , as it is appearing in the logs ?

 M.

[MHM Cisco World]

Reload SW meaning ip dhcp snooping database is clear 

The arp inspection use this database to inspect arp from port'

So do shwo ip dhcp snooping table

See if mac-ip-port entry is add.

But if I shut  no shut the phone it come up? YES becuase this process make phone ask dhcp for new IP and hence make ip dhcp snooping add entry to db table abd arp inspect it.

How can I solve this issue? Try make dhcp snooping in other file not locally in SW.

Thanks 

MHM

[fbabashahi]

Hi 

Thank you  for answer . i have a question is this a global problem ? i mean every org that has IP Phone, access point, Hub switch  does this ?

[MHM Cisco World]

If you upgrade then sure the database will clear' 

Then the clinet have IP which it leased not end yet so it not ask new IP' and hence the dhcp snooping can not build new DB after upgrading' so we copy the db to other devices (tftp) and then upgrade.

MHM

[Aref Alsouqi]

Catalyst 6500 Release 12.2SXF and Rebuilds Software Configuration Guide - DHCP Snooping [Cisco Catalyst 6500 Series Switches] - Cisco