Do we trust or untrust ports that connect to Access Point when configure DAI

[chuyendang]

I'm configuring DAI and wondering if we should put the port that connect to Access Point (Meraki) as trust or untrust port?

Thanks,

[PhilipDAth]

I think I would mark them as DAI trusted.  APs often use proxy arp on the wireless side to reduce the broadcasting of ARP packets - the very thing DAI relies on.

I suspect it would cause issues using DAI on an AP port.

[chuyendang]

We have seen a case that Wireless clients sniff the default gateway. If we trust the AP port, won't DAI block bad ARP? 

[redsector]

We have got all user ports untrusted even with MR accesspoints. No issues up to now (with MS10.45, MS11.22 and MR25.13 softwared networks/devices). Only the uplink-ports are trusted.