Aruba & ProVision-based

DHCP Snooping/Arp-Protection with Wireless AP

 
Sheepdog
Advisor

DHCP Snooping/Arp-Protection with Wireless AP

I have multiple wireless access points on different interfaces on my switch. When using DHCP Snooping and arp protection, Will i get network interruptions when moving from one access point to another since the device mac-address is essentially changing ports? I don't really want to make them trusted ports since the devices are likely untrusted.

2 REPLIES 2
akg7
HPE Pro

Re: DHCP Snooping/Arp-Protection with Wireless AP

Hello @Sheepdog,

I believe it's not. Please refer below links:

https://www.arubainstanton.com/techdocs/en/content/networks/desktop/network-secur-des.htm#:~:text=ARP%20Attack%20Protection&text=The%20system%20automatically%20learns%20the,the%2Dmiddle%20and%20impersonation%20attacks.

https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c02609533

Thanks!

Note: While I am an HPE Employee, all of my comments (whether noted or not), are my own and are not any official representation of the companyAccept or Kudo
Sheepdog
Advisor

Re: DHCP Snooping/Arp-Protection with Wireless AP

I turned arp inspection on and tried it with a couple different devices on a different wifi vlan/subnet that I use for testing. It doesn't seem to affect performance moving from one access point to another.  I'm going to turn it on the production network and monitor how it performs.