A typical problem on networks is that someone setup a DHCP server by mistake, and the entire network goes down.
Is it possible in VMware to close for port 68 UDP for all clients?
That would ensure that no VM would be able to act as a DHCP server.
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
Perhaps VMware vShield can do this.. I'm not sure. The built in vSwitches can not filter traffic.
Either way - security measures like these are usually put in place at the edge network. Cisco switches can for example use DHCP snooping to filter and/or rate limit DHCP offers from untrusted switch ports. This implicates that you do not run your DHCP server on the same vmware hosts as the vm's you are trying to block.