88
To modify the VLAN virtual interface, click the corresponding VLAN ID as below:
4.6.7 DHCP Snooping
DHCP Snooping Functions
In computer networking, DHCP snooping is a series of techniques applied to ensure the security of an existing
DHCP infrastructure. Its functions are as below:
Ensure that clients only obtain IP addresses legal servers assign to them.
If illegal DHCP servers exist in computer networking, DHCP clients might obtain incorrect IP addresses and
parameters, thus leading to abnormal communication. In order that DHCP clients obtain IP addresses via legal
DHCP servers, trusted ports and untrusted ports are allowed:
Trusted ports can forward DHCP packets they’ve received.
After receiving DHCP-ACK and DHCP-OFFER packets, untrusted ports will discard these packets.
Ports which are connected to DHCP servers and other DHCP Snooping devices need to be configured as trusted
ports and other ports need to be configured as untrusted ports, so that DHCP clients can only obtain IP addresses
from legal DHCP clients.
Record the corresponding relation between DHCP client’s IP address and MAC address.
By snooping DHCP-REQUEST and DHCP-ACK broadcast packets trust ports have received, it records DHCP
Содержание G3224P
Страница 1: ......
