Disable the Dynamic Host Configuration Protocol (DHCP) server and relay agent features on your router. Rationale: The DHCP server supplies automatic configuration parameters, such as dynamic IP address, to requesting systems. A dedicated server located in a secured management zone should be used to provide DHCP services instead. Attackers can potentially be used for denial-of-service (DoS) attacks. Impact: To reduce the risk of unauthorized access, organizations should implement a security policy restricting network protocols and explicitly require disabling all insecure or unnecessary protocols such as the Dynamic Host Configuration Protocol (DHCP).
Disable the DHCP server. hostname(config)#<strong>no service dhcp</strong> Default Value: Enabled by default, but also requires a DHCP pool to be set to activate the DHCP server.