Information
Disable the Bootstrap Protocol (BOOTP) service on your routing device.
Rationale:
BootP allows a router to issue IP addresses. This should be disabled unless there is a specific requirement.
Solution
Disable the bootp server.
hostname(config)#ip dhcp bootp ignore
Impact:
To reduce the risk of unauthorized access, organizations should implement a security policy restricting network protocols and explicitly require disabling all insecure or unnecessary protocols such as 'ip bootp server'.
Default Value:
Enabled
References:
Cisco IOS software receives Cisco Discovery Protocol information