DHCP及Option82安全机制的原理与实现

Principle and implementation of DHCP and option82 security mechanism

动态主机配置协议(DHCP)主要用来动态提供配置参数给因特网上的主机,一方面从DHCP服务器传送主机特定的协议配置参数到主机,同时自动分配网络地址给主机。目前本地局域网大多使用高速公共因特网接入技术和高速调制器,并使用动态主机配置协议分配用户的主机地址。然而,大量的公用主机地址的使用,也会引进安全问题。本文针对目前在局域网普遍使用的DHCP及其为解决安全问题而引进的Option82机制作了简单的描述,并具体阐述其在IPD-SLAM的一种具体实现方式。

The dynamic host configuration protocol （DHCP） provides the configuration parameters to Intemet hosts. DHCP consists of two components： a protocol for delivering host - specific configuration parameters from a DHCP server to a host and a mechanism for allocation of network addresses to hosts. Nowadays, most of local area network adopt high - speed public Internet access and modem, DHCP is used to allocate the host network addresses dynamically. However, a number of security and scaling problems arise with the use of public host network addresses. This paper mainly introduces the principle of DHCP and Option82 security mechanism, and describes the implementation in one IPDSLAM in details.