Design And Implementation Of DHCP Snooping Based On NETCONF

DHCP Snooping is the security feature of DHCP. For the network configuration management of DHCP Snooping, the most widely way is the command line and simple network management. But with the improvement of complexity of network and increasing of heterogeneity, these two methods can not meet the needs of next-generation network configuration management. In order to solve the problems of current network configuration management, the IETF standardization organization pass the NETCONF protocol in2006. It has a distinct advantage in the unified management, security and reliability, user interaction. Therefore, DHCP Snooping system designed and implemented with NETCONF protocol, has broad application prospect in the future of the network market. In this paper, the main work is as follows:(1) The related theories of DHCP Snooping and NETCONF protocol are researched. On this basis, the function, running environment and model diagram of DHCP Snooping system are analysed.(2) According to the relevant theoretical basis and the analysis of DHCP Snooping system, the overall design of DHCP Snooping is put forward under the NETCONF. By the method of top-down, layer by layer decomposition, the detailed scheme is designed, the relationship between the DHCP Snooping system and the external module is given, and the module decomposition of DHCP Snooping system is carried. Meanwhile, the configuration plug-in is designed combing the NETCONF protocol.(3) According to the design scheme, the concrete realization method of DHCP Snooping is put forward under the NETCONF, and DHCP Snooping system is realized by using the programming language.(4) Finally, the ideas, methods and network environment of DHCP Snooping testing are put forward in this paper. The system test is carried by the realized system. Furthermore, the encountered problems are analysed in the testing process and the solving methods are given. The test results show that, the system meets the NETCONF protocol standard, achieves the expected goals, convenients for network configuration management, and ensures the security of DHCP.