What is the feature that monitors for unauthorized DHCP servers on a network?

DHCP Snooping is a security feature designed to prevent unauthorized DHCP servers from operating on a network. It works by creating a trusted database and establishing which ports on a switch are legitimate sources of DHCP traffic. When a device sends a DHCP message, DHCP Snooping inspects the source of that message against its trusted list. If the message comes from an untrusted source, which could potentially be an unauthorized DHCP server, DHCP Snooping will drop the packet and prevent it from propagating through the network.

This feature helps mitigate attacks, such as DHCP spoofing, where a rogue server could assign incorrect IP addresses or malicious configurations to clients. By ensuring that only DHCP responses from trusted servers are allowed, DHCP Snooping effectively protects the integrity of the network's addressing infrastructure, promoting overall network security.