|
With the popularity of the Internet , the personal network terminal holdings rose rapidly , especially in the ownership of personal mobile terminal is showing explosive growth momentum , while the DHCP configuration by virtue of its simple easy becoming the preferred formation of networks IP address allocation . Network security awareness of the network terminal holder and should improve , coupled with some of the original security vulnerabilities lurking in the depths of the TCP / IP protocol , such as illegal DHCP server , ARP spoofing , has become increasingly prominent , making the original perilous Internet worse. To solve this problem , the network security management has gradually been put on the agenda, as a full range of security solutions , the traditional \integrate protective measures , intrinsically linked to dig all kinds of information , and then determine where the problem lies , and, ultimately, make the appropriate handling . In this paper, based on in-depth analysis of the DHCP protocol security vulnerabilities , summed up a number of network security threats common , and as a starting point to achieve a set of the DHCP security management system - DHCPGuard . The system can accurately identify and locate abnormal nodes can complete processing . The system is not only effective defense based on the DHCP vulnerability attacks , but also greatly reduces serious harm LAN security and stability of the ARP deception . At the end of this article , to the stability of the system with double insurance , and study of the DHCP server disaster recovery technology , integrate the DHCPGuard system and DHCP Failover mechanism to achieve the purpose of load balancing and to deal with unexpected situations .
|