DHCP Snooping/Arp-Protection with Wireless AP

[Sheepdog]

I have multiple wireless access points on different interfaces on my switch. When using DHCP Snooping and arp protection, Will i get network interruptions when moving from one access point to another since the device mac-address is essentially changing ports? I don't really want to make them trusted ports since the devices are likely untrusted.

[akg7]

Hello @Sheepdog,

I believe it's not. Please refer below links:

https://www.arubainstanton.com/techdocs/en/content/networks/desktop/network-secur-des.htm#:~:text=ARP%20Attack%20Protection&text=The%20system%20automatically%20learns%20the,the%2Dmiddle%20and%20impersonation%20attacks.

https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c02609533

Thanks!

[Sheepdog]

I turned arp inspection on and tried it with a couple different devices on a different wifi vlan/subnet that I use for testing. It doesn't seem to affect performance moving from one access point to another.  I'm going to turn it on the production network and monitor how it performs.