Finding And Stopping Rogue DHCP Servers On MikroTik

Hey there, this video will be looking at how to show you how to find rogue DHCP servers on your network. We will see how we can potentially stop these rogue servers from issuing out IP addresses to the network by using the DHCP Snooping feature on MikroTik.

👊Thanks for taking time to watch my video. If you could, pressing LIKE and SUBSCRIBING helps more people discover my videos. Feel free to leave a comment for any other topics you would like to see me cover or what your general opinion is of the video.

🕘Timestamps🕘
📕00:00 - Introduction
📕00:23 - Topology Overview
📕01:56 - Finding Rogue Servers (Wireshark)
📕04:12 - Configuring DHCP Alerts
📕07:30 - DHCP Snooping configuration
📕11:18 - Conclusion

Support the Channel:

Social Media:

MTCRE Playlist:

MTCNA Playlist:

Credits:

Thumbnail: Created on Canva
Intro: Created on Canva

Music by Alumo
Songs used:
Dioitic
Outland 85

Thanks again for watching

[TheNetworkBerg]

Pinning this comment with the relevant MikroTik help docs:

[drumer]

Very useful. Thank you so much for teaching us thing like this 💪

[Joshv]

Mikrotik shouted you out!! Pretty cool! Love your videos

[anasa.ghannam]

thanx man, very useful explanation, and nice Sepultura

[amaralarama]

great video and hell of a t-shirt my man 👍

[kresimirpecar]

Great video as always, very informative :D I would like to have push notification from the router... Instead of e-mail... I hope mikrotik do something about that... Aruba switches for eg can be managed from the cloud... (I think that notification are enough)

Thank you this with security awernes seams to increase a lot. How about a video to collect and manage logs from the Mikrotik? Line ntopt, greylog and others to detect and prevent intrusion.

[petrmiskerik]

Awesome, just awesome content. Thx man ♥

[drumaddict]

nice and compact info to cover a lot of topics (especially snooping!)
thanks for that ... but please give the mic some space ;)

[zadekeys]

Easiest eay to wirelessly take down a network you are testing - mikrotik as wireless bridge ; once you have internet, then on the wireless bridge enable the dhcp server for the same range and scope as the network youre connecting to... Boom, network will go down and if the core router is rebooted, the Mikrotik will reconnect and the fun will happen again.. as a PoC, you can run the Mikrotik off of a power bank, using a 5v to 12v usb to DC barrel jack cable.

[jessebustamante]

Love your shirt!!! Love your content! Keep it metal!! Keep it nerd! Don't change!
#CHAOS_AD

[pedro_]

4:39 or, or, or, you do one even better, if your device has a piezo buzzer you could play Seek & Destroy.

[oliver]

That was all well and good, but how do you protect it if they keep using smokebomb and vanish?

[AhmadAhmad-jfwb]

hello
great lesson
can u make lesson about best traffic shapping in mikrotik
best regards

[mathphy_rk]

Very good explanation, may I know what tools you are using in the dashboard?

[andrieshrr]

Great video! What kind of virtualisation software are you using?

[espeyskop]

hi very useful. If you are willing to share also the topic with option 82, it will help a lot. advance thanks.

[josepharueyingho]

Please I would really love to write scripts on my Mikrotik router, How do I go about doing that??

[PhamTienPhong]

I'm using router on a stick model so I also have VLAN joined a Bridge at Router. Is it necessary to enable DHCP Snooping on Router's Bridge and trust Router's ether2?

[ubi]

My scenario is a mk router, with another oem poe switch connected on port 3. The switch hosts my APs. An extender connected to the network to boost signal to grey area is behaving as a rogue server. What do you advise for dhcp snooping since it's only one port that's connected to the mk device ?