Wired

last person joined: yesterday 

Bring performance and reliability to your network with the Aruba Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of the ArubaOS-Switch and ArubaOS-CX devices, and find ways to improve security across your network to bring together a mobile first solution.
Expand all | Collapse all

VSX ISL & arp inspection/dhcpv4-snooping trust

  • 1.  VSX ISL & arp inspection/dhcpv4-snooping trust

    Posted Jan 15, 2021 05:05 AM
    Hello,

    perhaps an newbie question:
    We configured arp inspection/dhcpv4-snooping trust on the switch uplink lag,
    Do we also need to configure arp inspection/dhcpv4-snooping trust on the VSX inter-switch-link?

    Thanx in advance,

    ------------------------------
    Tonny Lankveld
    ------------------------------


  • 2.  RE: VSX ISL & arp inspection/dhcpv4-snooping trust

    Posted Jan 15, 2021 06:44 AM
    Hi Tonny, I strongly believe that VSX ISL should not be set with those parameters (there is, as example, vsx-sync arpsecurity command but it has a totally different scope and target).

    Have a check on the AOS-CX 10.06 Virtual Switching eXtension (VSX) Guide for 6400, 8320, 8325, 8360 and 8400 Switch Series to see how to configure the VSX Link (IIRC neither VSX Best Practice guide reports anything about those commands).

    ------------------------------
    Davide Poletto
    ------------------------------



  • 3.  RE: VSX ISL & arp inspection/dhcpv4-snooping trust

    Posted Jan 18, 2021 05:34 AM
    Hello,
    Not on the VSX ISL. This is not useful and not recommended.

    ------------------------------
    Vincent Giles
    ------------------------------