Wired Intelligent Edge

 View Only
  • 1.  VSX ISL & arp inspection/dhcpv4-snooping trust

    Posted Jan 15, 2021 05:05 AM
    Hello,

    perhaps an newbie question:
    We configured arp inspection/dhcpv4-snooping trust on the switch uplink lag,
    Do we also need to configure arp inspection/dhcpv4-snooping trust on the VSX inter-switch-link?

    Thanx in advance,

    ------------------------------
    Tonny Lankveld
    ------------------------------


  • 2.  RE: VSX ISL & arp inspection/dhcpv4-snooping trust

    Posted Jan 15, 2021 06:44 AM
    Edited by parnassus Jan 18, 2021 06:08 AM
    Hi Tonny, I strongly believe that VSX ISL should not be set with those parameters (there is, as example, vsx-sync arpsecurity command but it has a totally different scope and target).

    Have a check on the AOS-CX 10.06 Virtual Switching eXtension (VSX) Guide for 6400, 8320, 8325, 8360 and 8400 Switch Series to see how to configure the VSX Link (IIRC neither VSX Best Practice guide reports anything about those commands).

    ------------------------------
    Davide Poletto
    ------------------------------



  • 3.  RE: VSX ISL & arp inspection/dhcpv4-snooping trust

    Posted Jan 18, 2021 05:34 AM
    Hello,
    Not on the VSX ISL. This is not useful and not recommended.

    ------------------------------
    Vincent Giles
    ------------------------------