Edge Rewrite
everything Source code View original
// HTMLRewriter · presentation

This page was redesigned at the edge.

Cloudflare fetched the original article and streamed it through HTMLRewriter to apply an entirely new visual system without rebuilding the source page.

// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
CMH
Connection
HTTP/2
Language
Not provided

Ray ID: a21bd08a2f6f4bc2

Jump to content

DHCP snooping

From Wikipedia, the free encyclopedia
Example showing how DHCP snooping works

In computer networking, DHCP snooping is a series of techniques applied to improve the security of a Dynamic Host Configuration Protocol (DHCP) infrastructure.[1]

Techniques

[edit]

DHCP servers allocate IP addresses to clients on a LAN. DHCP snooping can be configured on LAN switches to exclude rogue DHCP servers and remove malicious or malformed DHCP traffic. In addition, information on hosts which have successfully completed a DHCP transaction is accrued in a database of bindings which may then be used by other security or accounting features.[2][3]

Other features may use DHCP snooping database information to ensure IP integrity on a Layer 2 switched domain. This information enables a network to:

  • Track the physical location of IP addresses when combined with AAA accounting or SNMP.
  • Ensure that hosts only use the IP addresses assigned to them when combined with source-guard; a.k.a. source-lockdown[4]
  • Sanitize ARP requests when combined with arp-inspection; a.k.a. arp-protect

References

[edit]
  1. ↑ Banks, Ethan. "Five Things To Know About DHCP Snooping". Packet Pushers. Retrieved 29 February 2016.
  2. ↑ "What Is DHCP Snooping, all things you should know". Leslie. Retrieved 22 March 2023.
  3. ↑ "DHCP Snooping". Adarsh Sahni. 14 July 2020.
  4. ↑ Cisco Systems, Inc. "Catalyst 3750-X and Catalyst 3560-X Switch Software Configuration Guide, Cisco IOS Release 15.0(2)SE and Later". Cisco.com. Retrieved 29 February 2016.
Retrieved from "https://en.wikipedia.org/w/index.php?title=DHCP_snooping&oldid=1314464849"