11-08-2013 03:16 AM
Hi,
It happens from time to time that students succeeds to connect a private router to our dorms network and it starts to propose leases that lead nowhere to our clients.
I wonder if my PA500 box can be configured to alert us if it discovers such DHCP lease proposals from other sources than our authorized DHCP servers?
Thanks for comments on this.
regards Tor
11-08-2013 05:33 AM
IMHO - PA cant do that, but much better idea is to use You switch to dosn't let tem do it.
If You have managed switch please find DHCP Snooping funtion. This will protect your DHCP server and you network from such problem.
Regards
SLawek
12-01-2013 08:57 AM
DHCP Snooping and DCHP Relay is the way to go.
And while you are at it check up for the possibility to use private (or at least protected) vlans aswell.
Configuring the DHCP features of the switch should also end up with configuring DAI, IP Source Guard and Option82 for traceability.
Many switch vendors also have extra logging available to log when a rogue dhcp server is detected in the network (that is when you have already configured dchp snooping and dhcp relay which points out which the valid dhcp servers are).
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
