A few simple strokes, security "Hu" DHCP server

The Manual for LAN workstation assignment IP address, not only easy to cause the IP address conflict phenomenon, but also not conducive to efficient management network, especially in some large-scale LAN environment, these disadvantages especially outstanding! In view of this, many units of network managers will often use a DHCP server to automatically assign IP addresses for workstations, which greatly improve the efficiency of the network management; However, in this way to manage the LAN network, the security of the DHCP server is very important, after all, DHCP occurred unexpectedly, The running state of the entire LAN network will be directly affected. In order to "HU" DHCP server safe operation, this article puts forward the following several security control Shifa, I hope to bring you help!

Restricting special users to manage DHCP servers

In the Unit LAN network, in order to prevent the ordinary staff to manage the DHCP server at will, which affects the overall performance of the LAN, it is necessary to assign the permissions of the DHCP service administration to the specific users, so that these users can manage the operation by the privileged account. To do this, it is very simple, we now assume that the DHCP service management "responsibility" to the "AAA" user account, you can follow the following steps to set:

First log in to the LAN domain server as a super administrator, and on the system desktop, open the Start menu, click the Settings/Control Panel command under the menu, and then double-click the Administrative Tools icon from the window that pops up, and open the server system's Administrative Tools List window;

Second, select the Active Directory Users and Computers tool icon in the Administrative Tools List window, right-click it, click Author from the shortcut menu that appears, and go to the Active Directory user and Computer list interface on the local area network ; In the display area on the left side of the interface, locate the "Users" option and select the "DHCP Administrators" option in the display area to the right where the option should be located;

Figure 1

Right-click the DHCP Administrators option, click Properties from the pop-up shortcut menu, open the DHCP Administrators Property Settings dialog box, click the Members tab in the dialog box, and open the Options settings page shown in Figure 1 , click the Add button on the page to select and add a special user's account "AAA" to the list box from the Select User dialog that pops up, and then click OK, so we can only manage the DHCP server with a "AAA" account in the future. If other people do not know the user account and access to the password, then they can not be arbitrary to the DHCP server management, so that the security of the DHCP server to a certain extent is guaranteed.