2

Is there any way to prevent a DHCP Starvation attack when using a wireless network with anonymous users?

  • Port security cannot be used since maxing the number of clients that can connect on a port would block legitimate users too, which is essentially what the attacker wants to achieve in the first place.
  • DHCP snooping is useless without port security since an attacker can spoof his MAC address in the Ethernet packet, as well as in the DHCP payload.

I found one source which claimed that MAC address spoofing is impossible because of the 802.11 standards, which would solve the problem, but after some further looking, I could not find any other source validating this.

Edit:

  • This is not a duplicate of How to prevent DHCP Starvation attack? since I already found that question before I asked mine. The difference is the "wireless network" part which makes a huge difference since port security is not a possible solution.
  • By anonymous I do mean random people which makes mac filtering impossible too. How do public wifi spots solve this? Do they?
  • 2
    Possible duplicate of How to prevent DHCP Starvation attack? – Thomas May 15 at 21:40
  • 1
    MAC filtering ? No white-listed MAC, no allocated IP. That's if by anonymous users you don't mean you allow random people to connect. – Overmind May 16 at 5:30
  • I've edited my question to make it more clear if it wasn't already. – Keanu May 17 at 12:01
  • Hello Keanu and welcome to StackExchange. If you feel like a question is close enough to be a duplicate, but different enough to warrant its own question, then please state so in your initial question. This avoids confusion, people flagging your question as duplicate, etc. – MechMK1 May 17 at 12:03
  • Hello MechMK1, I've edited my question to make it clear why this is different than the other post. I'm still looking for an answer to this as I need to be able to answer this question in my thesis. – Keanu May 19 at 15:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.