DHCP spoof attack - Revision history

Heth at 16:18, 28 February 2010

2010-02-28T16:18:53Z

Heth at 16:38, 2 July 2009

2009-07-02T16:38:35Z

Heth: /* Show command */

2009-05-09T07:37:46Z

‎Show command

Heth at 07:37, 9 May 2009

2009-05-09T07:37:34Z

Heth: /* Protecting against DHCP spoof attack */

2009-05-06T07:51:41Z

‎Protecting against DHCP spoof attack

Heth: /* Protecting against DHCP spoof attack */

2009-05-06T07:47:19Z

‎Protecting against DHCP spoof attack

Heth at 06:35, 6 May 2009

2009-05-06T06:35:54Z

Heth: New page: A DHCP Spoof attack is a illegal DHCP server setup in a LAN environment which configures the clients with wrong IP information. The illegal DHCP server can configure the clients with it se...

2009-05-06T06:14:40Z

New page: A DHCP Spoof attack is a illegal DHCP server setup in a LAN environment which configures the clients with wrong IP information. The illegal DHCP server can configure the clients with it se...

New page

A DHCP Spoof attack is a illegal DHCP server setup in a LAN environment which configures the clients with wrong IP information. The illegal DHCP server can configure the clients with it self as the default gateway, in which case all non-local traffic will be sent to the illegal DHCP server where the intruder can inspect or alter the packets before they are sent on to the real gateway. this is known as a ''man in the middle'' attack
[[Category:Network]][[Category:Security]][[Category:CCNP]][[Category:CCNP3]]

@@ Line 23: / Line 23: @@
 *See example [[Netband Project - DHCP Snooping]]
 *See hackipedia [http://www.hakipedia.com/index.php/DHCP_Starvation DHCP_Starvation]
-{{#css:
+{{Source cli}}
-    pre {   font-family: Lucida Console; font-weight: bold; font-size: 14px; color: #00FF00; background: black; margin: 10px 50px; width: 800px; line-height: 200%; overflow: auto;}
 [[Category:Network]][[Category:Security]][[Category:CCNP]][[Category:CCNP3]]

@@ Line 2: / Line 2: @@
 = Protecting against DHCP spoof attack =
 On the ''access'' switches you can protect against spoofing
-<pre>
+<source lang="cli">
 ip dhcp spoofing
 interface GigabitEthernet0/1
   description Trunk to Distribution layer and DHCP server
   ip dhcp snooping trust
-</pre>
+</source>
 = Show command =
-<pre>
+<source lang="cli">
-Switch# show ip dhcp snooping
+Switch# <input>show ip dhcp snooping</input>
 Switch DHCP snooping is enabled
 DHCP Snooping is configured on the following VLANs:
@@ Line 20: / Line 20: @@
 FastEthernet0/2      no              20
 GigabitEthernet0/1   yes             none
-</pre>
+</source>
 *See example [[Netband Project - DHCP Snooping]]
 *See hackipedia [http://www.hakipedia.com/index.php/DHCP_Starvation DHCP_Starvation]
 [[Category:Network]][[Category:Security]][[Category:CCNP]][[Category:CCNP3]]

@@ Line 21: / Line 21: @@
 GigabitEthernet0/1   yes             none
 </pre>
-See example [[Netband Project - DHCP Snooping]]
+*See example [[Netband Project - DHCP Snooping]]
-See hackipedia [http://www.hakipedia.com/index.php/DHCP_Starvation DHCP_Starvation]
+*See hackipedia [http://www.hakipedia.com/index.php/DHCP_Starvation DHCP_Starvation]
 [[Category:Network]][[Category:Security]][[Category:CCNP]][[Category:CCNP3]]

@@ Line 21: / Line 21: @@
 GigabitEthernet0/1   yes             none
 </pre>
-See example[[Netband Project - DHCP Snooping]]
+See example [[Netband Project - DHCP Snooping]]
 [[Category:Network]][[Category:Security]][[Category:CCNP]][[Category:CCNP3]]

@@ Line 8: / Line 8: @@
   ip dhcp snooping trust
 </pre>
-See [[Netband Project - DHCP Snooping]]
+= Show command =
 [[Category:Network]][[Category:Security]][[Category:CCNP]][[Category:CCNP3]]

← Older revision		Revision as of 06:35, 6 May 2009
Line 1:		Line 1:
−	A DHCP Spoof attack is a illegal DHCP server setup in a LAN environment which configures the clients with wrong IP information. The illegal DHCP server can configure the clients with it self as the default gateway, in which case all non-local traffic will be sent to the illegal DHCP server where the intruder can inspect or alter the packets before they are sent on to the real gateway. this is known as a ''man in the middle'' attack	+	A DHCP Spoof attack is a illegal DHCP server setup in a LAN environment which configures the clients with wrong IP information. The illegal DHCP server can configure the clients with it self as the default gateway, in which case all non-local traffic will be sent to the illegal DHCP server where the intruder can inspect or alter the packets before they are sent on to the real gateway. this is known as a ''man in the middle'' attack.
		+	= Protecting against DHCP spoof attack =
		+	On the ''access'' switches you can protect against spoofing
		+	<pre>
		+	ip dhcp spoofing
		+	interface GigabitEthernet0/1
		+	description Trunk to Distribution layer and DHCP server
		+	ip dhcp snooping trust
		+	</pre>
	[[Category:Network]][[Category:Security]][[Category:CCNP]][[Category:CCNP3]]		[[Category:Network]][[Category:Security]][[Category:CCNP]][[Category:CCNP3]]