High Quality Content by WIKIPEDIA articles! When DHCP servers are allocating IP addresses to the clients on the LAN, DHCP snooping can be configured on LAN switches to harden the security on the LAN to allow only clients with specific IP/MAC addresses to have access to the network. In short, DHCP snooping ensures IP integrity on a Layer 2 switched domain. With DHCP snooping, only a whitelist of IP addresses may access the network. The whitelist is configured at the switch port level, and the DHCP server manages the access control. Only specific IP addresses with specific MAC addresses on specific ports may access the IP network. DHCP snooping also stops attackers from adding their own DHCP servers to the network. An attacker-controlled DHCP server could wreak havoc in the network or even control it.

Данное издание не является оригинальным. Книга печатается по технологии принт-он-деманд после получения заказа.