I have enabled DHCP snooping on my system. Switch A has the DHCP connected and the port on VLAN 70 for DHCP has been trusted to allow for reading the database and passing addresses. VLAN 70 rides the Fiber Trunk to Switch B where the Client on VLAN 70 is connected on port 10. The trunk line has also been trusted on either end to allow to enable snooping. I have also enabled ip arp inspection vlan 70
on just SWITCH B.
Here is where the question gets tough. Due to the nature of the client machine it is required to have a static address which it has of 192.168.1.10. As a safeguard in case the network on the client resets the DHCP has a reservation for that device on it as well to the same address.
The issue I am facing is since I having enabled snooping on the device and arp inspection all the DHCP clients have no problem getting onto the network on switch B. But the client with the static address is getting no connection. It is showing up as Unidentified Network. ARP inspection is sending a SYSLOG entry on the port with a DAI-4DHCP_SNOOPING_DENY
. If I turn ARP Inspection off that syslog entry goes away but I continue to not get a valid connection. What am I missing to allow my static client to get a valid connection?
I can say I have tried an arp access-list
entry for that client but that didn't do anything for the connection.
The Switch B has the following commands enabled:
ip dhcp snooping
ip dhcp snooping vlan 70
int range gi1-24 ip verify source
ip arp inspection vlan 70
Switch A has the ip dhcp snooping trust
on the DHCP server ports and the trunk but does not have snooping enable.