DHCP security technology testing

DHCP Security Technology Test

1. Test content: security ability test for DHCP

2. Test equipment: cisco3750, cisco3550, PC (win7), SERVER (win2008)

3. Logical topology:

4. Test Description:

1) Use 3750 analog router to enable full Layer 3 functionality

2) IP DHCP snooping technology is used to control the DHCP Layer 2 source interface.

3) Use IP helper-address to specify cross-segment servers to ensure three-layer security.

4) When crossing network segments, you need to type ip dhcp reply information trust-all on 3750 (router). If you are using a router as a DHCP server, you need to use the ip dhcp reply information trust-all command. In this lab, 3750 (router) uses helper-address forwarding dhcp packets from

From the client side, the 3750 (router) acts as a server.

5. Attention:

1) DHCP snooping technology was not supported by early IOS.

2) dhcp snooping technology is usually mixed with DAI and IPSG flexibly.