摘要
局域网内采用DHCP机制可以提高局域网IP地址分配管理效率,但是,用户私下设置的伪DHCP服务器等威胁影响了合法的DHCP服务器的安全正常运行。IP DHCP Snooping技术通过配置交换机等网络设备的非信任端口,可以隔绝非法的DHCP服务器,实现帮助网络管理人员有效的防治伪DHCP服务器带来的危害。
The mechanism of DHCP is adopted by LAN for improving the efficiency of the assignment of IP address.However,the legal DHCP server is influenced by some threatens and can't work well,for example,some users setup rogue DHCP servers,which legal users will get false network configuration from it.Using the technology of IP DHCP Snooping can isolate the illegal DHCP server by the method of setting the untrusted ports,and this can help mangers of LAN to prevent the harm from rogue DHCP server.
出处
《电脑知识与技术》
2011年第10X期7372-7373,共2页
Computer Knowledge and Technology
基金
黄冈师范学院青年科研基金项目(2011CQ135)
