After basic DHCP snooping functions are configured, DHCP clients can obtain IP addresses from the authorized DHCP server, preventing attacks on the network from bogus DHCP servers. However, many other DHCP attacks exist on the network. To mitigate these attacks, configure DHCP snooping attack mitigation functions on the device as required.
In this chapter, the function in Configuring Defense Against Bogus DHCP Message Attacks and the function in step 2 of Configuring Defense Against DHCP Server DoS Attacks are also applicable to DHCPv6 snooping.
Basic DHCP snooping functions have been configured.