基于VLAN动态划分的多子网反DHCP服务冒充技术

Multi-subnet anti-rogue DHCP servers technique based on VLAN dynamic dividing

DHCP(动态主机配置协议)为网络管理带来了极大的方便,但存在诸如DHCP服务冒充等诸多安全问题。本文针对常见的反DHCP服务冒充技术存在的不足,提出了一种基于VLAN动态划分(即VLAN轮询)的多子网反DHCP服务冒充技术,介绍了其设计原理及实现技术,并就DHCP服务响应时间及其产生的网络流量进行了测试,该方法也可用于监测DHCP服务器工作是否正常。

DHCP makes network management easy and convenient, but DHCP has some security problems such as the problem of rogue DHCP server, Focusing on the deficiency of common technique of anti-rogue DHCP servered, A new multi-subnet anti-rogue DHCP technique based on dynamic VLAN dividing was put forward. It also presents the design principles and practical techniques as well as the data of the testing of response time of DHCP server and its corresponding net traffic. This technique can also be applied to the monitoring of DHCP server.