DHCP Snooping is broken as far as I can tell.
Clients on any of the DS enabled ports are still able to backfeed DHCP servers onto our network on VLAN 1.
DHCP Snooping Broken
Re: DHCP Snooping Broken
I will look at this Monday, sir; I started trying yesterday afternoon, but I had something with BenchNet and RouterOS6 that made it impossible - Migrated to RouterOS 7 and VRF, got done around 3 AM, but it's running tickety boo and I have the segmentation in place to test this.
Today I'm fried, I need to go spend the day with the wife and kids, haven't seen much of them in the last month or two
Be well, sir!
Edit, little more than a week later:
Okay, slight hiccup while I rebuild my test node; I was physically able to make some similar set of circumstances occur, where an adapter pulled a DHCP assignment from a segmented vlan; It'll be a much cleaner test case with the node up and I'll be able to get my pcaps straight; When i say BenchNet's 'tickety boo' i mean loops, whorls, circles, and such lol
edit edit: in my case it's bridging on an upstream NAT leg, not an actual seg bleed; Still digging but all I have actually confirmed is that I suck at firewalls
Today I'm fried, I need to go spend the day with the wife and kids, haven't seen much of them in the last month or two
Be well, sir!
Edit, little more than a week later:
Okay, slight hiccup while I rebuild my test node; I was physically able to make some similar set of circumstances occur, where an adapter pulled a DHCP assignment from a segmented vlan; It'll be a much cleaner test case with the node up and I'll be able to get my pcaps straight; When i say BenchNet's 'tickety boo' i mean loops, whorls, circles, and such lol
edit edit: in my case it's bridging on an upstream NAT leg, not an actual seg bleed; Still digging but all I have actually confirmed is that I suck at firewalls
2 posts
Page 1 of 1
Who is online
Users browsing this forum: Google [Bot] and 154 guests
