[Infrastructures] DHCP for servers

Rupert Fiennes rupert@itmw.org
Tue, 28 Jun 2005 12:28:56 +0100


Have yourself a build VLAN :-)

Rupert Fiennes

Stephen P. Schaefer wrote:
> One issue to consider is your security posture: DHCP is a completely
> unauthenticated protocol.  (How can you authenticate before you know who
> you are or anyone else is?)  I've occasionally run a DHCP *server* on my
> Linux laptop when we couldn't figure out how to get the Microsoft DHCP
> server to behave as I wanted it to (whereas the ISC server "just
> worked").  But the flip side is that anyone with physical access to the
> subnet can also run a a DHCP server, causing havoc - and not necessarily
> maliciously: maybe their laptop is their DHCP server *at home* - I know
> mine occasionally is :-).
>