System and method of assigning and reclaiming static addresses through the dynamic host configuration protocol

• US 20060047791A1
• Filed: 08/18/2005
• Published: 03/02/2006
• Est. Priority Date: 10/23/2000
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Bahl, Pradeep
• Granted Patent: US 7,587,518 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]

Abstract

Presented is a system and method for providing centralized address management of static IP addresses through the dynamic host control protocol. Static or permanent IP addresses are those addresses assigned by DHCP having an infinite lease time. The assignment of such static IP addresses follows the conventional DHCP mechanism for the assignment of other IP addresses. However, the centralized reclamation of a statically or permanently assigned IP address by a network administrator through the DHCP server presents novel aspects of the invention heretofore unknown. Specifically, through the system and method of the present invention, the DHCP server is capable of reclaiming at any point in time, a statically or permanently assigned IP address by transmitting a DHCP RECLAIM command to the DHCP client, or through its relay agent. In the normal situation, the DHCP client acknowledges the RECLAIM command, allowing the IP address to be placed in the FREE state. If, however, the DHCP client does not respond or the responses are not received by the DHCP server, the DHCP server marks the state of the IP address as DEPRECATED. The state of the IP address will be changed from DEPRECATED to FREE once a number of retries of the RECLAIM process has been completed, or a maximum period of time has passed. Security mechanisms to prevent a malicious attacker from reclaiming static IP address from DHCP clients are also presented.

Claims

1. A method of reclaiming static IP addresses from a client machine connected to a network utilizing a dynamic host configuration protocol (DHCP) server, comprising:

establishing a security association with the client machine;

sending a DHCP RECLAIM command to the client machine having the static IP address to be reclaimed; and

setting a state of the static IP address to be reclaimed to FREE.

2. The method of claim 1, wherein setting a state of the static IP address to be reclaimed to FREE is dependent on receiving an acknowledgment of the DHCP RECLAIM command from the client machine.

3. The method of claim 2, wherein receiving an acknowledgment comprises receiving a positive acknowledgment (ACK) and receiving a negative acknowledgment (NACK).

4. The method of claim 2, further comprising setting a state of the static IP address to be reclaimed to DEPRECATED before setting a state of the static IP address to be reclaimed to FREE.

5. The method of claim 4, further comprising seeding an address resolution protocol (ARP) cache with a physical address of the client machine.

6. The method of claim 4, further comprising:

receiving a DHCP DISCOVER request from the client machine having a static IP address whose state is DEPRECATED;

setting the state to FREE; and

sending an IP address to the client machine.

7. The method of claim 4, further comprising:

receiving a DHCP RENEW request from the client machine having the static IP address whose state is DEPRECATED; and

sending a NACK to the client machine.

8. The method of claim 4, further comprising re-transmitting the DHCP RECLAIM command after the expiration of an interval.

9. The method of claim 4, further comprising setting the state to FREE after a maximum lifetime of the DEPRECATED state.

10. The method of claim 1, wherein the security association is an IPSEC security association.

11. The method of claim 1, wherein the security association is established using a challenge mechanism.

12. A method of relinquishing a static IP address, comprising:

establishing a security association with a dynamic host configuration protocol (DHCP) server;

receiving a DHCP RECLAIM command;

entering the DHCP initialization (INIT) state to obtain a new IP address; and

sending an acknowledgment (ACK) of the DHCP RECLAIM command.

13. The method of claim 12, wherein the security association is an IPSEC security association.

14. The method of claim 12, wherein the security association is established using a challenge mechanism.

15. The method of claim 12, further comprising:

wherein the DHCP RECLAIM command relates to a particular IP address;

determining if the particular IP address is valid; and

entering the DHCP INIT state in response to determining the IP address is valid, otherwise sending a negative acknowledgment (NACK).

16. The method of claim 12, further comprising:

marking the IP address for removal;

sending an acknowledgment (ACK); and

removing the marking of the IP address for removal.

17. The method of claim 15, further comprising:

entering a DHCP INIT state in response to determining the current IP address is marked for removal; and

entering a DHCP INIT_REBOOT state in response to determining the current IP address is not marked for removal.

18. The method of claim 17, further comprising entering the DHCP INIT state if a negative acknowledgment (NACK) is received in response to entering a DHCP INIT_REBOOT state.

19. The method of claim 17, wherein the security association is an IPSEC security association.

20. The method of claim 17, wherein the security association is established using a challenge mechanism.

17-1. A method of connecting to a network to achieve an IP address through DHCP, comprising:

establishing a security association with a dynamic host configuration protocol (DHCP) server;

determining whether a current IP address exists;

determining whether the current IP address is marked for removal;

entering a DHCP INIT state in response to determining there is no current IP address;

entering a DHCP INIT state in response to determining the current IP address is marked for removal; and

entering a DHCP INIT_REBOOT state in response to determining the current IP address is not marked for removal.