InformationDisable the Dynamic Host Configuration Protocol (DHCP) server and relay agent features on your router.
The DHCP server supplies automatic configuration parameters, such as dynamic IP address, to requesting systems. A dedicated server located in a secured management zone should be used to provide DHCP services instead. Attackers can potentially be used for denial-of-service (DoS) attacks.
To reduce the risk of unauthorized access, organizations should implement a security policy restricting network protocols and explicitly require disabling all insecure or unnecessary protocols such as the Dynamic Host Configuration Protocol (DHCP).
SolutionDisable the DHCP server.
hostname(config)#<strong>no service dhcp</strong>
Enabled by default, but also requires a DHCP pool to be set to activate the DHCP server.