InterVLAN Broadcast flooding problem

[f3rha4n]

Hello,
In our deployment we have a core switch (BD 8800) connecting to edge switches (x440-24p) through aggregation switches (x460-24x).
All the ports on edge switches are configured for at least two vlans, vlan 10 is voice and an untagged vlan for data or other applications.
Now the problem is I am seeing traffic (at least broadcast) from the untagged vlans appearing in voice vlan.
This is happening all over the network hence putting extra load on all ports and as a result the IP Phones are not able to acquire IP from DHCP server. If i remove the tagged vlan (i.e voice) from a specific port then the leakage from that port into voice vlan stops.
Any idea about solving this issue ?

[f3rha4n]

Hi Martin,
Nowhere in my deployment is voice untagged. All the IP phones detect the vlan through LLDP med (which i have disabled for now). The only untagged port for voice vlan is the one I am using for troubleshooting right now.

[f3rha4n]

hi Jarek,
Currently my laptop is connected to an untagged voice vlan port on an x440 switch.
There is a device (10.154.0.22) connected on another switch which is currently looking for its server(10.154.0.10), the server is not installed yet.
The port to which the device is connected is tagged for voice vlan 10 and untagged for its data vlan 15. And i can see the ARP broadcast on my laptop, which as i mentioned earlier is connected to an untagged voice vlan port.
My goal right now is to eliminate any traffic in any vlan that does not belong to it, unless its routed by the core switch

[Anonymous]

Wonder if somewhere you have a link with data untagged and voice tagged, yet the other end you have voice untagged and data tagged.

As both data and voice are connected untagged, I wonder if you can indirectly connect the vlans that way and therefore have broadcast spread across both?

[Jarek]

Hi,

did this work before ?
If you plug to the port only for example laptop and port config is vlan 10 tag + vlan untagged,
do you see this issue ?
Maybe the IP Phone is working as a bridge for tagged and untagged traffic and connect this two vlans...?

--
Jarek