基于端口信任的DHCP-SNOOPING防范对策研究与实现  

Research and Implementation of DHCP-SNOOPING Prevention Countermeasures Based on Port Trust

作　　者：李春平[1] Li Chunping(Faculty of Megadata and Computing,Guangdong Baiyun University,Guangzhou 510000)

机构地区：[1]广东白云学院大数据与计算机学院,广州510000

出　　处：《现代计算机》2022年第8期82-86,共5页Modern Computer

摘　　要：文中分析了DHCP工作原理和DHCP Snooping机制,并运用Cisco Packet Tracer工具进行仿真,提出了DHCP Snooping配置方法和过程,详细分析了DHCP报文格式和内容,验证了DHCP Snooping技术对防范仿冒DHCP服务器功能的有效性。该方法对局域网上部署DHCP服务器,防止DHCP仿冒和泛洪攻击,增强网络可用性、可靠性和安全性有一定的借鉴意义。The paper analyzes the working principle of DHCP and DHCP Snooping mechanism,and uses the Cisco Packet Tracer tool to simulate,proposes the DHCP Snooping configuration method and process,analyzes the format and content of DHCP messages in detail,and verifies the function of DHCP Snooping technology against counterfeiting DHCP servers Effectiveness.This method has certain reference significance for deploying a DHCP server on a local area network,preventing DHCP counterfeiting and flooding attacks,and enhancing network availability,reliability and security.

关 键 词：DHCP DHCP Snooping 端口信任 泛洪攻击 网络安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]