Security Management
345
Managed Switches
a. The previous figure shows that the messages increased for port 1/0/27, indicating
that the port is connected to a rogue DHCP server.
2. Enable the logging of invalid packets for port 1/0/27.
a. Select Security > Control > DHCP Snooping > Interface Configuration.
A screen similar to the following displays.
b. Select the 1/0/27 check box.
c. In the Invalid Packets field, select Enable.
d. Click Apply.
3. Determine the IP address and MAC address for the rogue DHCP server:
a. Select Monitoring > Logs > Logs > Buffered logs.
A screen similar to the following displays.
b. Search for “DHCP packet; op Reply”.
In the previous figure, the IP address of the DHCP server is 10.100.5.253 and the
MAC address is 00:26:F2:F6:B3:6C.
To Next Page
Loading...
