DHCP Security Configuration in HiveAP

  • 2
  • Question
  • Updated 3 years ago
  • Answered
Does Aerohive's AP Support "DHCP snooping" and "IP Source Guard"?

I couldn't find any option for this in DHCP Configuration page with my hivemanager.

Thanks in advance for your help.
Photo of Jeongmo Jeong

Jeongmo Jeong

  • 8 Posts
  • 0 Reply Likes

Posted 5 years ago

  • 2
Photo of Tash Hepting

Tash Hepting

  • 55 Posts
  • 29 Reply Likes
Official Response
The APs will snoop DHCP by default to determine a client's IP address (as well as operating system). Is that what you meant by DHCP snooping, or is there something else you were looking for?

There is also an "IP Spoof" detection feature in the IP DOS filters section which will prevent clients from spoofing multiple IP addresses. You access from the SSID configuration, in the "DoS Prevention and Filters" portion of the Optional settings near the bottom. Look for the "IP DoS Per SSID" section and click the + to create a new DoS filter. Name it, check the box for "Ip Spoof" and pick an appropriate reaction (alarm, ban, etc...). It's not exactly the same as IP Source Guard, but it might be close enough depending on what you are trying to do.