2.1.4 Set 'no service dhcp' - dhcp pool

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Disable the Dynamic Host Configuration Protocol (DHCP) server and relay agent features on your router.

Rationale:

The DHCP server supplies automatic configuration parameters, such as dynamic IP address, to requesting systems. A dedicated server located in a secured management zone should be used to provide DHCP services instead. Attackers can potentially be used for denial-of-service (DoS) attacks.

Impact:

To reduce the risk of unauthorized access, organizations should implement a security policy restricting network protocols and explicitly require disabling all insecure or unnecessary protocols such as the Dynamic Host Configuration Protocol (DHCP).

Solution

Disable the DHCP server.


hostname(config)#<strong>no service dhcp</strong>

Default Value:

Enabled by default, but also requires a DHCP pool to be set to activate the DHCP server.

See Also

https://workbench.cisecurity.org/files/3156