https://community.extremenetworks.com/t5/extremewireless-general/nac-gateway-ip-resolution-possibilities/m-p/30810#M598 <P>Analysing recurring MAC-to-IP Resolution problems in conjunction with EXOS Switches...<BR /><BR />SecureStacks switches seems to be easier to handle regarding this topic - maybe of the existing nodealias functionality ...<BR /><BR />My question is:<BR />what does "Always Use Fully Trusted DHCP IP" ??<BR />&nbsp;</P><P><span class="lia-inline-image-display-wrapper" image-alt="f2bbe88f879a401dbfc9ca83d5ba57ff_RackMultipart20170131-115706-1yr3wam-Always-Use-Fully-Trusted-DHCP-IP_inline.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/765i5372524F89298A32/image-size/large?v=v2&amp;px=999" role="button" title="f2bbe88f879a401dbfc9ca83d5ba57ff_RackMultipart20170131-115706-1yr3wam-Always-Use-Fully-Trusted-DHCP-IP_inline.png" alt="f2bbe88f879a401dbfc9ca83d5ba57ff_RackMultipart20170131-115706-1yr3wam-Always-Use-Fully-Trusted-DHCP-IP_inline.png" /></span></P><P>&nbsp;</P><P><BR />Unfortunately no online Help - no manual - no GTAC KB<BR /><BR />Anybody knows that feature ??<BR /><BR />PS: These solve my problems basically:<BR /><A href="https://extremeportal.force.com/ExtrArticleDetail?an=000066216" target="_blank" rel="nofollow noreferrer noopener">https://extremeportal.force.com/ExtrArticleDetail?an=000066216</A><BR /><BR />Regards</P><P>&nbsp;</P> Tue, 31 Jan 2017 21:58:00 GMT M_Nees 2017-01-31T21:58:00Z https://community.extremenetworks.com/t5/extremewireless-general/nac-gateway-ip-resolution-possibilities/m-p/30810#M598 <P>Analysing recurring MAC-to-IP Resolution problems in conjunction with EXOS Switches...<BR /><BR />SecureStacks switches seems to be easier to handle regarding this topic - maybe of the existing nodealias functionality ...<BR /><BR />My question is:<BR />what does "Always Use Fully Trusted DHCP IP" ??<BR />&nbsp;</P><P><span class="lia-inline-image-display-wrapper" image-alt="f2bbe88f879a401dbfc9ca83d5ba57ff_RackMultipart20170131-115706-1yr3wam-Always-Use-Fully-Trusted-DHCP-IP_inline.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/765i5372524F89298A32/image-size/large?v=v2&amp;px=999" role="button" title="f2bbe88f879a401dbfc9ca83d5ba57ff_RackMultipart20170131-115706-1yr3wam-Always-Use-Fully-Trusted-DHCP-IP_inline.png" alt="f2bbe88f879a401dbfc9ca83d5ba57ff_RackMultipart20170131-115706-1yr3wam-Always-Use-Fully-Trusted-DHCP-IP_inline.png" /></span></P><P>&nbsp;</P><P><BR />Unfortunately no online Help - no manual - no GTAC KB<BR /><BR />Anybody knows that feature ??<BR /><BR />PS: These solve my problems basically:<BR /><A href="https://extremeportal.force.com/ExtrArticleDetail?an=000066216" target="_blank" rel="nofollow noreferrer noopener">https://extremeportal.force.com/ExtrArticleDetail?an=000066216</A><BR /><BR />Regards</P><P>&nbsp;</P> Tue, 31 Jan 2017 21:58:00 GMT https://community.extremenetworks.com/t5/extremewireless-general/nac-gateway-ip-resolution-possibilities/m-p/30810#M598 M_Nees 2017-01-31T21:58:00Z https://community.extremenetworks.com/t5/extremewireless-general/nac-gateway-ip-resolution-possibilities/m-p/30811#M599 Hi Matthias,<BR /> <BR /> I believe "Always Use Fully Trusted DHCP IP" means that the NAC needs to be able to see both sides of the DHCP conversation. Instead of just seeing the DHCP Request that is seen from IP Helper Addresses, NAC would also need to see the offers and informs afterwards. This is typically accomplished with either a port mirror, promiscuous mode in VMware, or via policy mirror for DHCP traffic.<BR /> <BR /> Thanks,<BR /> <BR /> Tyler Tue, 31 Jan 2017 23:11:00 GMT https://community.extremenetworks.com/t5/extremewireless-general/nac-gateway-ip-resolution-possibilities/m-p/30811#M599 TylerMarcotte 2017-01-31T23:11:00Z