About kalmanfranko

kalmanfranko · 02-21-2024

Dear Community!There is a strange thing I just can not understand related to the following scenario:I have two VLANs (200, 201)One rogue DHCP-server per VLAN200 and VLAN201DHCP-clients are in VLAN200.We have a 1941 router with two subinterfaces confi...

kalmanfranko · 02-23-2024

Dear MHM!Thank You for the response. Indeed, it seems quite unusual, that the attacker has the same IP as the trusted DHCP, but we are testing a scenario where the trusted device becomes unreacheable (following a DDOS attack or something similar) and...

kalmanfranko · 02-22-2024

Dear MHM!Thank You for the quick response. The only difference between your scenario and mine is that I use router instead of L3 switch for intervlan routing purposes. Here I attach my topology:The problem in a nutshell: snooping protects the VLAN200...

kalmanfranko · 02-22-2024

Dear David! Thank You for responding. Indeed, my description was not 100% clear. In short, the problem is that the attacking DHCP server is able to provide DHCP services to another VLAN and is unable to do so to its own VLAN via the untrusted port. A...

kalmanfranko · 02-22-2024

Dear MHM! Here it is:SWITCH:ip dhcp snooping vlan 200-201ip dhcp snoopingCLIENTS INTERFACES:interface FastEthernet0/1switchport access vlan 200switchport mode access!interface FastEthernet0/2switchport access vlan 200switchport mode access!TRUSTED DH...

Member Since	‎02-21-2024 05:33 AM
Date Last Visited	‎03-27-2024 12:16 AM
Posts	5

User Statistics

User Activity

DHCP snooping problem / untrusted port permit DHCP packet

Re: DHCP snooping problem / untrusted port permit DHCP packet

Re: DHCP snooping problem / untrusted port permit DHCP packet

Re: DHCP snooping problem / untrusted port permit DHCP packet

Re: DHCP snooping problem / untrusted port permit DHCP packet