Enabling duplicated address detection

DHCP client detects IP address conflict through ARP packets. An attacker can act as the IP address owner to send an ARP reply. The spoofing attack makes the client unable to use the IP address assigned by the server. As a best practice, disable duplicate address detection when ARP attacks exist on the network.

To enable duplicated address detection:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable duplicate address detection.

dhcp client dad enable

By default, the duplicate address detection feature is enabled on an interface.