Automatic distribution of dynamic host configuration protocol (DHCP) keys via link layer discovery protocol (LLDP)
A method for obtaining information from a server. The method includes a client device receiving a link layer message transmitted by a network node, the link layer message comprising authentication information; and the client device using the authentication information to obtain information from the server.
1. A method for obtaining information from a server, the method comprising:
a client device receiving a link layer message transmitted by a network node, the link layer message comprising authentication information, the link layer message excluding network routing information, the network routing information comprising an Internet protocol (IP) address, wherein the network routing information is excluded from the link layer message prior to IP connectivity for client device being established, wherein the authentication information is associated with a particular interface of the network node when the client device is identified as an expected client device; and
the client device using the authentication information to obtain information from the server.
2. The method of claim 1 , wherein the authentication information comprises: a key; a unique identifier, and a client identifier.
3. The method of claim 1 , wherein the client device is a DHCP client device and the server is a DHCP server.
4. The method of claim 1 , wherein the link layer message is a Link Layer Discovery Protocol (LLDP) message comprising a plurality of type-length-value (TLV) components.
5. The method of claim 4 , wherein the authentication information is included in at least one or more TLV components.
6. The method of claim 1 , wherein using the authentication information to obtain information from the server comprises:
the client device transmitting a discover message including the client identifier;
the client device receiving an offer message transmitted by the server, wherein the second DHCP message includes the unique identifier and a signature, and wherein the signature is based on a Hash-based Message Authentication Code (HMAC) calculated using at least the key;
the client device transmitting a request message including the unique identifier and the signature; and
the client device receiving an acknowledge message including the unique identifier and the signature.
7. A computer program comprising instructions which, when executed by processing circuitry, causes the processing circuitry to carry out the method of claim 1 .
8. A carrier containing the computer program of claim 7 , wherein the carrier is one of an electronic signal, an optical signal, a radio signal, and a computer readable storage medium.
9. A client device for obtaining information from a server, the client device being adapted to:
receive a link layer message transmitted by a network node, the link layer message comprising authentication information, the link layer message excluding network routing information, the network routing information comprising an Internet protocol (IP) address, wherein the network routing information is excluded from the link layer message prior to IP connectivity for client device being established, wherein the authentication information is associated with a particular interface of the network node when the client device is identified as an expected client device; and
use the authentication information to obtain information from the server.
10. The client device of claim 9 , wherein the authentication information comprises: a key; a unique identifier, and a client identifier.
11. The client device of claim 9 , wherein the client device is a DHCP client device and the server is a DHCP server.
12. The client device of claim 9 , wherein the link layer message is a Link Layer Discovery Protocol (LLDP) message comprising a plurality of type-length-value (TLV) components.
13. The client device of claim 12 , wherein the authentication information is included in at least one or more TLV components.
14. The client device of claim 9 , wherein using the authentication information to obtain information from the server comprises:
transmit a discover message including the client identifier;
receive an offer message transmitted by the server, wherein the second DHCP message includes the unique identifier and a signature, and wherein the signature is based on a Hash-based Message Authentication Code (HMAC) calculated using at least the key;
transmit a request message including the unique identifier and the signature; and
receive an acknowledge message including the unique identifier and the signature.