beautypg.com

5 dhcp filtering – PLANET FGSW-2840 User Manual

Page 94

background image

User’s Manual of FGSW-2840 / FGSW-4840S

4.3.5 DHCP Filtering

Nowadays, the network is getting larger and more complicated. The amount of the PCs always exceeds that of the assigned IP

addresses. The wireless network and the laptops are widely used and the locations of the PCs are always changed. Therefore,

the corresponding IP address of the PC should be updated with a few configurations. DHCP (Dynamic Host Configuration

Protocol) functions are to solve the above mentioned problems.

However, during the working process of DHCP, generally there is no authentication mechanism between Server and Client. If

there are several DHCP servers in the network, network confusion and security problem will happen. To protect the Managed

Switch from being attacked by illegal DHCP servers, configure the desired ports as trusted ports and only the clients connected

to the trusted ports can receive DHCP packets from DHCP severs. Here the DHCP Filtering function performs to monitor the

process of hosts obtaining IP addresses from DHCP servers.

DHCP Working Principle

DHCP works via the “Client/Server” communication mode. The Client applies to the Server for configuration. The Server

assigns the configuration information, such as the IP address, to the Client, so as to reach a dynamic employ of the network

source. A Server can assign IP address to several Clients, which is illustrated in the following figure.

Figure 4-3-21:

Network Diagram of DHCP

For different DHCP clients, DHCP server provides three IP address assigning methods:

(1)

Manually assign the IP address: Allows the administrator to bind the static IP address to a specific client (e.g., WWW
Server) via the DHCP server.

(2)

Automatically assign the IP address: DHCP server assigns the IP address without an expiry time limitation to the
clients.

(3)

Dynamically assign the IP address: DHCP server assigns the IP address with an expiry time. When the time for the IP
address expired, the client should apply for a new one.

Most clients obtain IP addresses dynamically, which is illustrated in the following figure.

94

This manual is related to the following products: