DHCP being prioritized over ARP is by design in NSX-T. This behavior holds for all NSX-T versions.
Workaround:
Disable DHCP Snooping in IP discovery profile if TOFU based workflow is required.
Steps to Disable DHCP Snooping in the IP Discovery Profile
Create a new IP discovery Profile.
Add the required number of ARP bindings inĀ
ARP binding limit, as by default the limit is 1, if the VM has a VIP, then it should be at least 2.
Networking --> Segments --> Segments Profile --> ADD SEGMENT Profile --> IP Discovery --> DHCP Snooping (Disable) --> leave the other as default. --> Save
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID-9AED56D8-B5AE-4711-952E-B3E7DEECBC8F.html
Apply the newly created IP Discovery Profile to the Segment
Default IP Discovery Profile with DHCP Snooping Enabled
Newly created IP Discovery Profile with DHCP Snooping Disabled