摘要
DHCP服务可以说是接入网络的必备服务,但是其在安全方面还存在很多不足之处,其中包括能够引发DoS攻击的IP耗尽攻击,DHCP服务器冒用等等。针对攻击的方式,防御的措施有:Port Security,DHCP Snooping和基于VLAN的ACL等。本文讨论的主要是IP耗尽攻击及防御措施。
Abstract
DHCP is the necessary protocol to access the network, but it leaves much to be desired in terms of security. Include of IP address pool exhaustion (which leads to a DoS attack) and installing a rogue DHCP server. There are such methods to against the atta
关键词
DHCP/耗尽攻击/PortSecurity/DHCPSnoopingKey words
DHCP/Exhaustion/Port Security/DHCP Snooping引用本文复制引用
出版年
2011