DHCP Conflict Detection via ARP Sniffing and MAC Blocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods fail to efficiently and reliably identify and isolate hosts using conflicting static IP addresses in a network, leading to resource-intensive IP source filtering and potential network interruptions.
Innovation Solution
A method that involves sniffing all packets on a VLAN, using ARP requests to detect conflicting static IP addresses, blocking the offending host's MAC address, and generating SNMP traps to alert administrators, thereby selectively dropping traffic from the offending host without relying on IP source filtering.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IP source filtering is used to detect and block conflicting static IP addresses, then address conflict detection capability is improved, but hardware resources are consumed and network interruptions may occur
Solution Approach 1:
The patent introduces ARP (Address Resolution Protocol) as an intermediary mechanism between the DHCP server and the conflicting host. The DHCP server sends ARP requests to resolve the MAC address of the conflicting host, and the host responds with its MAC address. This intermediary ARP process enables the DHCP server to identify and block conflicting hosts without requiring complex IP source filtering hardware, thus resolving the contradiction between detection capability and hardware resource consumption.
2Loss of information
If hosts themselves detect IP address conflict, then conflict awareness is improved, but the authorized user is not required to take action and the conflict continues to cause problems
Solution Approach 1:
The patent implements a feedback mechanism where the DHCP server actively monitors network conditions and sends ARP requests to detect conflicting hosts. When a conflict is detected, the DHCP server blocks the conflicting host's MAC address and sends notifications to the authorized user. This feedback loop ensures that the authorized user is informed and can take action to resolve the conflict, thereby improving both conflict awareness and user protection without requiring continuous user intervention.
Data Source
AI summary
The present invention resolves IP address conflicts in a network with DHCP or other address assignment protocol when some host on the network uses a conflicting static IP address to an IP address assigned to another host. The preferred method involves offering a given IP address to a host/node through the address assignment protocol while also detecting any other host/node using the offered IP address on a given VLAN using address resolution protocol. If another host/node is using the IP address, the offending host/node may be blocked on that VLAN for a set amount of time.