Determine a trusted dynamic host configuration protocol (DHCP) server in a DHCP snooping environment
AssigneeDell Products L.P.
InventorsKarthi Kaliyamoorthy, Ramesh Ganapathi
Life of this patent
Estimating the term…
Abstract
Presented herein are systems and methods to determine whether a dynamic host configuration protocol (DHCP) server in DHCP snooping environment is a trusted device without requiring trusted port configuration. In one or more embodiments, a DHCP snooping-enable switch/router adds an indicator to a message intended for a DHCP server, thereby notifying the DHCP server that the DHCP switch/router is enabled for or capable of “detection of trusted DHCP server.” The DHCP server includes a unique trusted identifier in its reply that the DHCP switch/router uses to verify whether the DHCP server can be considered a trusted device.
Claims20
A computer-implemented method for determining a trusted dynamic host configuration protocol (DHCP) server in a DHCP snooping environment, the method comprising:
- responsive to receiving at a DHCP information handling system a client message from a DHCP client:
- adding an indicator to the client message to indicate to a DHCP server, that is to receive the client message with the indicator, that the DHCP information handling system performs a check to verify if the DHCP server is a trusted device;
- and
- sending the client message with the indicator to the DHCP server;
- and
- responsive to receiving at the DHCP information handling system a reply message from the DHCP server:
- obtaining a received unique trusted identifier value from the reply message that was included by the DHCP server to verify status of the DHCP server;
- obtaining a generated unique trusted identifier value, which was generated using at least a master key and a unique identifier for the DHCP server as inputs into a cryptographic-related operation;
- comparing the received unique trusted identifier value to the generated unique trusted identifier value;
- and
- responsive to the received unique trusted identifier value matching the generated unique trusted identifier value, sending at least a portion of the reply message to the DHCP client.
A non-transitory computer-readable medium or media comprising one or more sequences of instructions which, when executed by at least one processor, causes steps to be performed comprising:
- responsive to receiving at a dynamic host configuration protocol (DHCP) information handling system a client message from a DHCP client:
- adding an indicator to the client message to indicate to a DHCP server, that is to receive the client message with the indicator, that the DHCP information handling system performs a check to verify if the DHCP server is a trusted device;
- and
- sending the client message with the indicator to the DHCP server;
- and
- responsive to receiving at the DHCP information handling system a reply message from the DHCP server:
- obtaining a received unique trusted identifier value from the reply message that was included by the DHCP server to verify status of the DHCP server;
- obtaining a generated unique trusted identifier value, which was generated using at least a master key and a unique identifier for the DHCP server as inputs into a cryptographic-related operation;
- comparing the received unique trusted identifier value to the generated unique trusted identifier value;
- and
- responsive to the received unique trusted identifier value matching the generated unique trusted identifier value, sending at least a portion of the reply message to the DHCP client.
A dynamic host configuration protocol (DHCP) information handling system comprising:
- one or more processors;
- and
- a non-transitory computer-readable medium or media comprising one or more sets of instructions which, when executed by at least one of the one or more processors, causes steps to be performed comprising:
- responsive to receiving at the DHCP information handling system a client message from a DHCP client:
- adding an indicator to the client message to indicate to a DHCP server that is to receive the client message with the indicator that the DHCP information handling system performs a check to verify if the DHCP server is a trusted device;
- and
- sending the client message with the indicator to the DHCP server;
- and
- responsive to receiving at the DHCP information handling system a reply message from the DHCP server:
- obtaining a received unique trusted identifier value from the reply message that was included by the DHCP server to verify status of the DHCP server;
- obtaining a generated unique trusted identifier value, which was generated using at least a master key and a unique identifier for the DHCP server as inputs into a cryptographic-related operation;
- comparing the received unique trusted identifier value to the generated unique trusted identifier value;
- and
- responsive to the received unique trusted identifier value matching the generated unique trusted identifier value, sending at least a portion of the reply message to the DHCP client.
Dependencies are inferred from the claim text.