介绍DHCP协议的工作原理和几种基于DHCP协议的网络攻击行为。在此基础上提供一套基于DHCP SNOPING绑定表和信任端口、非信任端口的DHCP安全机制来解决常见的DHCP攻击行为(如仿冒SERVER攻击、DOS攻击、中间人攻击、用户恶意修改IP或MAC的攻击)。 Describes the working principle of the DHCP protocol and several network attacks based on the DHCP protocol. Based on this, a set of DHCP security mechanism based on DHCP SNOPING binding table and trusted port and untrusted port is provided to solve common DHCP attack behaviors such as counterfeit SERVER attack, DOS attack, man-in-the-middle attack, malicious modification of IP or MAC by users attack).