如何解决无线局域网内伪造DHCP服务器攻击  

How to solve the attack of forging DHCP server in WLAN

作　　者：唐磊[1] 

机构地区：[1]重庆三峡职业学院信息化建设办公室,重庆404155

出　　处：《科学技术创新》2020年第30期86-87,共2页Scientific and Technological Innovation

摘　　要：随着科技的飞速发展,传统的有线局域网(LAN)已无法跟上科技发展的步伐,而无线局域网(WLAN)给人们生活带来便利。在无线局域网架构中,使用AC管理AP,AP通过AC获取到管理IP地址,用户接入AP后,通过路由器的DHCP服务分配IP上网。通常情况DHCP服务能够正确分配IP地址,计算机能正常上网。但是如果在交换机的某个端口接入具有DHCP功能的路由器设备,或者在局域网中安装服务器系统并开启DHCP服务,这时局域网中存在多个DHCP服务器,从而导致用户获取伪造DHCP服务器的IP地址,无法通过认证上网。本文介绍如何查找无线局域网内伪造DHCP服务器,以及防范方法。With the rapid development of science and technology,the traditional wired local area network(LAN)has been unable to keep up with the pace of technological development,and wireless local area network(WLAN)has brought convenience to people's life.In the wireless LAN architecture,the AP uses AC to manage the AP.The AP obtains the management IP address through AC.after accessing the AP,the user allocates IP to the Internet through the DHCP service of the router.Usually,the DHCP service can assign the IP address correctly,and the computer can access the Internet normally.However,if a router with DHCP function is connected to a certain port of the switch,or the server system is installed in the LAN and the DHCP service is enabled,there are multiple DHCP servers in the LAN,which will lead to the user obtaining the IP address of the forged DHCP server and unable to access the Internet through authentication.This paper introduces how to find forged DHCP server in WLAN and how to prevent it.

关 键 词：DHCP DHCP Snooping IP MAC地址 局域网 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]