Why should we consider implementing DHCP Snooping? - Network technologies and trends

Network technologies and trends

Nov 22 2008   7:22AM GMT

Why should we consider implementing DHCP Snooping?



Posted by: Yasir Irfan
Networking, Security, DHCP, Switches, Cisco, Switching, Cisco 2960, Cisco 2950, Cisco 6500, Cisco Tips, Cisco 3560, Cisco 3750-E, Cisco 3560-E, Err-disable, Cisco Systems, Cisco 6500 Series Catalyst Switch, Cisco 6503, DHCP Snooping

Dear FriendsIn my previous post I was discussing about the DHCP Snooping, it may be hard to believe a DHCP sever can lead to lot troubles in your network. Consider a host sends out DHCP discovery packets, it listens for a DHCP offers packets and accepts the first available offer from a DHCP server. Guess what happens if the host gets a DHCP offer from a rouge DHCP server? The host could end up with using rouge DHCP server with an IP address and the default gateway. The host cannot access any of the resources from your network. 

Yes we can prevent this with DHCP snooping thanks to Cisco. DHCP snooping classifies interfaces as either trusted or untrusted. DHCP messages received on trusted interfaces will be permitted to pass through the Cisco switch, but DHCP messages received on untrusted interface in a Cisco Switch results in putting the interface into error disable state. Configuring DHCP snooping in a Network is quite troublesome job but I will try to make things easier for you by using a scenario, which hopefully I am going post soon.

Comment on this Post


You must be logged-in to post a comment. Log-in/Register

Britney1940  |   Nov 24 2008   4:44AM GMT

Wide circle is a social media networking that delivers your ads to a large number of websites.
=============
Britney
Social Bookmarking Service