I'm separating voice and data traffic on a LAN by using the "switchport voice vlan" command. All ports are configured with this command.
However, while sniffing traffic on a pc directly connected to a switchport (without phone inbetween) we can see arp-broadcasts originating from the voice-vlan.
This behavior is strange to me since I can see voice traffic on a host in the data vlan.
The used setup:
switchport access vlan 1
switchport mode access
switchport voice vlan 2
PC connected to Fa1/0/1 (has ip address in data vlan 1)
Cisco Phone connected to Fa1/0/2 (has ip address in Voice vlan 2)
while capturing traffic on the PC we see arp requests originating from the Cisco-phone on Fa1/0/2 (clearly voice vlan traffic) the arp requests the owner of the default gateway-IP.
In my opinion the traffic should be seperated since it's not acceptable to see voice traffic on a data segment (like demonstrated here).
Question is, can someone explain this behavior and does an alternative exists to prevent voice-arp-broadcasts arriving on the data vlan (while keeping the voice vlan functionality).