Riverstone Networks WICT1-12 User Manual

7-22   Riverstone Networks RS Switch Router User Guide   Release 8.0 

Anti-Spoofing

  CMTS Configuration Guide

Static and Dynamic Anti-IP Spoofing

IP-spoofing can be implemented statically or dynamically. The following sections give examples of each type of 
anti-spoofing.

Static configuration requires manually assigning an individual MAC address to an individual IP address.

Here is an example:

In dynamic configuration, a snoop function snoops DHCP packets to find IP address/MAC address information. If 
anti-IP spoofing is enabled, the information is used to prevent spoofing. To prevent spoofing, the IP address/MAC 
address pairs are stored in a data base and are used to check for spoofed IP addresses.

Dynamic configuration is enabled using the 

 command in 

conjunction with the 

 command.

Here is an example.

Implementing DHCP-strict forces all CPEs to use DHCP. This implementation provides strict provisioning over IP 
address usage. Here is the command to implement
DHCP-strict: