{"id":57,"title":"Site-Aware DHCP ile Lokasyon Bazl\u0131 IP Da\u011f\u0131t\u0131m\u0131","content":"<p   data-selectable-paragraph=\"\"><span >M<\/span>odern \u015firket altyap\u0131lar\u0131nda birden fazla lokasyonda hizmet veren istemcilerin, IP adreslerini bulunduklar\u0131 fiziksel veya topolojik konuma en yak\u0131n DHCP sunucusundan almalar\u0131, hem performans hem de y\u00f6netim a\u00e7\u0131s\u0131ndan kritik bir gereksinimdir.<\/p> <p   data-selectable-paragraph=\"\">Klasik DHCP mimarisinde, istemciler yay\u0131n (broadcast) yaparak IP talebinde bulunurlar ve bu yay\u0131n e\u011fer DHCP relay agent\u2019lar taraf\u0131ndan belirli sunuculara y\u00f6nlendirilmezse, istemciler rastgele bir DHCP sunucusundan IP alabilir. Bu da istemcinin, kendi lokasyonundan kilometrelerce uzaktaki bir sunucudan IP alarak a\u011f gecikmelerine ve merkezi y\u00f6netim s\u0131k\u0131nt\u0131lar\u0131na yol a\u00e7ar.<\/p> <p   data-selectable-paragraph=\"\">Bu noktada devreye \u201c<strong >Site-Aware DHCP<\/strong>\u201d girer. Microsoft\u2019un Windows Server 2012 ile birlikte sundu\u011fu bu \u00f6zellik sayesinde DHCP sunucular\u0131, istemcilerin hangi Active Directory site\u2019\u0131nda yer ald\u0131\u011f\u0131n\u0131 alg\u0131layarak, yaln\u0131zca o site i\u00e7in tan\u0131mlan\u0131\u015f olan IP scope\u2019lardan IP adresi atar. Bu durum a\u011f y\u00fck\u00fcn\u00fc azalt\u0131rken, y\u00f6netimsel karma\u015fay\u0131 da ortadan kald\u0131r\u0131r.<\/p> <p   data-selectable-paragraph=\"\">Bu yaz\u0131da Site-Aware DHCP kavram\u0131n\u0131 temelden ele alarak; \u00e7al\u0131\u015fma mant\u0131\u011f\u0131n\u0131, yap\u0131land\u0131rma gerekliliklerini, \u00f6rnek senaryolar\u0131 ve siber g\u00fcvenlik bak\u0131\u015f a\u00e7\u0131s\u0131ndan de\u011ferlendirmeleri detayl\u0131 olarak inceleyece\u011fiz.<\/p> <h1   data-selectable-paragraph=\"\">\ud83d\udd0e 5N1K Analizi<\/h1> <ul > <li   data-selectable-paragraph=\"\"><strong >\ud83d\udccd Ne?<\/strong> Site-Aware DHCP, istemcinin bulundu\u011fu Active Directory site bilgisine dayanarak yaln\u0131zca ilgili site i\u00e7in tan\u0131mlanm\u0131\u015f scope\u2019lardan IP adresi da\u011f\u0131tan bir teknolojidir.<\/li> <li   data-selectable-paragraph=\"\"><strong >\u2753 Neden?<\/strong> Uzak DHCP sunucular\u0131ndan IP al\u0131nmas\u0131n\u0131 \u00f6nlemek, gecikmeyi azaltmak, DHCP yay\u0131n trafi\u011fini kontrol alt\u0131na almak ve subnet bazl\u0131 merkezi y\u00f6netimi sa\u011flamak i\u00e7in kullan\u0131l\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83d\udc64 Kim?<\/strong> Sistem y\u00f6neticileri, Active Directory ve a\u011f altyap\u0131 mimarisiyle ilgilenen uzmanlar; \u00e7ok lokasyonlu yap\u0131lara sahip kurumlarda uygulamakla sorumludur.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83d\uddd3 Ne Zaman?<\/strong> Windows Server 2012 itibariyle desteklenmeye ba\u015flam\u0131\u015ft\u0131r. \u015eu anda Windows Server 2016, 2019, 2022 ve Azure ortamlar\u0131nda aktif olarak kullan\u0131lmaktad\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83c\udf10 Nerede?<\/strong> Birden fazla fiziksel ofisi\/lokasyonu bulunan, Active Directory Sites and Services ile subnet-sitesi e\u015fle\u015fmesi yap\u0131lm\u0131\u015f ortamlarda uygulan\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >\u2699\ufe0f Nas\u0131l?<\/strong> DHCP sunucusu, gelen DHCPDISCOVER paketinin giaddr alan\u0131na bakarak istemcinin ait oldu\u011fu subnet ve site bilgisini belirler. Bu site i\u00e7in scope varsa IP atar, yoksa sessiz kal\u0131r. B\u00f6ylece yaln\u0131zca istemcinin fiziksel olarak ba\u011fl\u0131 oldu\u011fu subnet\u2019e IP atan\u0131r.<\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\u2705 Site-Aware DHCP\u2019nin Temel \u00c7al\u0131\u015fma Mant\u0131\u011f\u0131<\/h1> <p   data-selectable-paragraph=\"\">Site-Aware DHCP, Active Directory Sites and Services yap\u0131land\u0131rmas\u0131 ile do\u011frudan ba\u011flant\u0131l\u0131 olarak \u00e7al\u0131\u015f\u0131r. Her subnet bir Active Directory site ile ilir. Her subnet bir Active Directory site ile ili\u015fkilendirilmi\u015fse, DHCP sunucular\u0131 bu bilgiyi kullanarak istemcinin bulundu\u011fu site\u2019\u0131 alg\u0131lar.<\/p> <p   data-selectable-paragraph=\"\">Bu i\u015flemin \u00f6z\u00fc, istemcinin DHCPDISCOVER yay\u0131n paketinde bulunan\u00a0<strong >giaddr (Gateway IP Address)<\/strong>\u00a0alan\u0131na dayan\u0131r. Bu adres, istemcinin a\u011f \u00fczerindeki konumunu belirtir ve DHCP sunucusu bu adresi kullanarak istemcinin hangi subnet\u2019te bulundu\u011funu ve dolay\u0131s\u0131yla hangi AD site\u2019\u0131na ait oldu\u011funu \u00e7\u0131karabilir.<\/p> <p   data-selectable-paragraph=\"\">DHCP sunucusu, kendi \u00fczerindeki scope\u2019lardan yaln\u0131zca istemcinin bulundu\u011fu site ile ili\u015fkili olan\u0131 se\u00e7er ve IP da\u011f\u0131t\u0131m\u0131n\u0131 buna g\u00f6re yapar. E\u011fer sunucu bu site i\u00e7in scope bar\u0131nd\u0131rm\u0131yorsa, herhangi bir IP yan\u0131t\u0131 vermez.<\/p> <p   data-selectable-paragraph=\"\">Bu mimarinin en b\u00fcy\u00fck faydas\u0131, istemcilerin do\u011fru lokasyondan IP almas\u0131n\u0131 garanti alt\u0131na almas\u0131 ve hatal\u0131 veya uzak DHCP yan\u0131tlar\u0131n\u0131 engellemesidir.<\/p> <h1   data-selectable-paragraph=\"\">\ud83d\udeaa Gereksinimler ve Haz\u0131rl\u0131klar<\/h1> <p   data-selectable-paragraph=\"\">Site-Aware DHCP\u2019nin sorunsuz \u00e7al\u0131\u015fabilmesi i\u00e7in a\u015fa\u011f\u0131daki unsurlar do\u011fru \u015fekilde yap\u0131land\u0131r\u0131lmal\u0131d\u0131r:<\/p> <ol > <li   data-selectable-paragraph=\"\"><strong >Subnet-to-Site Mapping<\/strong>: AD Sites and Services i\u00e7inde her subnet do\u011fru bir \u015fekilde bir site\u2019a ba\u011flanmal\u0131d\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >DHCP Sunucular\u0131 Domain\u2019e Dahil Olmal\u0131 ve Authorized Olmal\u0131d\u0131r<\/strong><\/li> <li   data-selectable-paragraph=\"\"><strong >Scope Tan\u0131mlar\u0131 Site Bazl\u0131 Yap\u0131lmal\u0131<\/strong>: Her site i\u00e7in ayr\u0131 ayr\u0131 DHCP scope olu\u015fturulmal\u0131.<\/li> <li   data-selectable-paragraph=\"\"><strong >DHCP Relay Agent Do\u011fru Yap\u0131land\u0131r\u0131lmal\u0131<\/strong>: \u00d6zellikle VLAN ge\u00e7i\u015flerinde, istemci yay\u0131n\u0131n\u0131n DHCP sunucusuna ula\u015fmas\u0131 i\u00e7in gerekli routing ve relay tan\u0131mlar\u0131 yap\u0131lmal\u0131d\u0131r.<\/li> <\/ol> <h1   data-selectable-paragraph=\"\">\ud83d\udcca DHCPDISCOVER \u0130\u00e7erik Yap\u0131s\u0131na Genel Bak\u0131\u015f<\/h1> <p   data-selectable-paragraph=\"\">Bir DHCPDISCOVER paketi a\u015fa\u011f\u0131daki \u00f6\u011feleri i\u00e7erir:<\/p> <ul > <li   data-selectable-paragraph=\"\"><strong >Client MAC Address<\/strong>: \u0130stemci ayg\u0131t\u0131n fiziksel adresi.<\/li> <li   data-selectable-paragraph=\"\"><strong >giaddr<\/strong>: Gateway IP adresi (DHCP sunucusunun istemcinin nerede oldu\u011funu anlamas\u0131 i\u00e7in kullan\u0131l\u0131r).<\/li> <li   data-selectable-paragraph=\"\"><strong >Option 82<\/strong>: (Varsa) DHCP relay agent bilgisi.<\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\u2705 Avantajlar \u2014 Dezavantajlar<\/h1> <h1   data-selectable-paragraph=\"\">\u2714\ufe0f Avantajlar<\/h1> <ul > <li   data-selectable-paragraph=\"\"><strong >\ud83c\udf0e Lokasyon Bazl\u0131 IP Da\u011f\u0131t\u0131m\u0131:<\/strong>\u00a0Site-Aware DHCP, istemcilerin fiziksel veya topolojik olarak ait olduklar\u0131 site\u2019dan IP alarak, co\u011frafi ve mant\u0131ksal ayr\u0131\u015fman\u0131n korunmas\u0131n\u0131 sa\u011flar.<\/li> <li   data-selectable-paragraph=\"\"><strong >\u23f3 WAN Trafi\u011fini Azalt\u0131r:<\/strong>\u00a0Uzak ofislerdeki istemcilerin, merkezdeki DHCP sunucular\u0131ndan IP alarak WAN \u00fczerinde trafik olu\u015fturmas\u0131n\u0131 engeller.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83d\udcc8 Performans Art\u0131\u015f\u0131:<\/strong>\u00a0DHCP yan\u0131tlar\u0131 yerel sunucudan gelece\u011fi i\u00e7in, IP atama s\u00fcreleri azal\u0131r, ba\u011flant\u0131 h\u0131z\u0131 ve a\u011f gecikmesi minimize edilir.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83d\ude9a Broadcast Trafi\u011fini S\u0131n\u0131rland\u0131r\u0131r:<\/strong>\u00a0DHCP yay\u0131nlar\u0131n\u0131n kontrol alt\u0131nda tutulmas\u0131, a\u011f cihazlar\u0131 \u00fczerindeki y\u00fck\u00fc azalt\u0131r ve stabiliteyi art\u0131r\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83d\udd27 Merkezi Y\u00f6netim Kolayl\u0131\u011f\u0131:<\/strong>\u00a0Her site i\u00e7in ayr\u0131 DHCP scope tan\u0131mlanarak, y\u00f6netimsel da\u011f\u0131n\u0131kl\u0131k ortadan kald\u0131r\u0131l\u0131r. Bu da IP takibini ve hatalar\u0131n tespitini kolayla\u015ft\u0131r\u0131r.<\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\u274c Dezavantajlar<\/h1> <ul > <li   data-selectable-paragraph=\"\"><strong >\ud83d\udeab Yanl\u0131\u015f Subnet-Site E\u015fle\u015fmesi Sorunlar\u0131:<\/strong>\u00a0AD Sites and Services \u00fczerinde subnet hatal\u0131 tan\u0131mlan\u0131rsa, istemciler IP alamayabilir veya yanl\u0131\u015f DHCP sunucusuna y\u00f6nlendirilebilir.<\/li> <li   data-selectable-paragraph=\"\"><strong >\u26a0\ufe0f Relay Agent Yap\u0131land\u0131rmas\u0131 Zorunlu:<\/strong>\u00a0VLAN ayr\u0131m\u0131 veya Layer 3 ge\u00e7i\u015flerde relay agent ayarlar\u0131 do\u011fru yap\u0131land\u0131r\u0131lmazsa, DHCPDISCOVER paketi giaddr bilgisi iletilemez.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83e\udd7a Karma Yap\u0131larda Debug Zorlu\u011fu:<\/strong>\u00a0\u00c7ok say\u0131da site ve subnet olan yap\u0131larda hata ay\u0131klama ve log takibi karma\u015f\u0131k olabilir.<\/li> <li   data-selectable-paragraph=\"\"><strong >\u274e Domain Entegrasyonu Zorunlu:<\/strong>\u00a0DHCP sunucular\u0131n\u0131n domain\u2019e dahil ve authorized olmas\u0131 \u015fartt\u0131r. Aksi durumda Site-Aware \u00e7al\u0131\u015fmaz.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83d\udcc9 Hatal\u0131 Scope Payla\u015f\u0131mlar\u0131:<\/strong>\u00a0Birden fazla site\u2019da ortak IP aral\u0131\u011f\u0131 kullan\u0131lmas\u0131 durumunda IP \u00e7ak\u0131\u015fmas\u0131 veya tutars\u0131zl\u0131klar meydana gelebilir.<\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\ud83d\udee1\ufe0f Siber G\u00fcvenlik A\u00e7\u0131s\u0131ndan Bak\u0131\u015f<\/h1> <p   data-selectable-paragraph=\"\">Site-Aware DHCP do\u011frudan bir siber g\u00fcvenlik arac\u0131 de\u011fildir, ancak do\u011fru konfig\u00fcre edildi\u011finde a\u011f g\u00fcvenli\u011fine katk\u0131 sa\u011flar. DHCP trafi\u011finin site bazl\u0131 s\u0131n\u0131rland\u0131r\u0131lmas\u0131, istemcilerin yetkisiz veya yanl\u0131\u015f DHCP sunucular\u0131ndan IP alman\u0131n\u0131 engeller. Bu, \u201c<strong >DHCP Spoofing<\/strong>\u201d gibi yayg\u0131n a\u011f i\u00e7i sald\u0131r\u0131lar\u0131n etkisini azaltmak i\u00e7in ilk savunma hatt\u0131d\u0131r.<\/p> <h1   data-selectable-paragraph=\"\">\ud83d\udccd Anahtar G\u00fcvenlik Kazan\u00e7lar\u0131<\/h1> <ul > <li   data-selectable-paragraph=\"\"><strong >\ud83d\udd10 Yetkisiz DHCP Sunucular\u0131n\u0131 Engelleme:<\/strong>\u00a0Site-Aware mant\u0131\u011f\u0131yla birlikte, yaln\u0131zca domain\u2019e dahil ve authorized DHCP sunucular\u0131 IP verebilir. Unauthorized sunucular sessiz kal\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >\u2696\ufe0f VLAN\/Network Segmentasyonuna Katk\u0131:<\/strong>\u00a0Site bazl\u0131 ayr\u0131\u015ft\u0131rma, DHCP yay\u0131nlar\u0131n\u0131 s\u0131n\u0131rlar ve segmentasyon g\u00fcvenli\u011fini destekler.<\/li> <li   data-selectable-paragraph=\"\"><strong >\u26d4 DHCP Snooping ile Uyumluluk:<\/strong>\u00a0Site-Aware yap\u0131s\u0131, switch seviyesi DHCP snooping ile birlikte kullan\u0131ld\u0131\u011f\u0131nda rogue sunucular engellenebilir.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83e\udd20 Log Takibi Kolayla\u015f\u0131r:<\/strong>\u00a0Hangi istemcinin hangi scope\u2019tan IP ald\u0131\u011f\u0131 kolayl\u0131kla izlenebilir. Bu da \u015f\u00fcpheli IP da\u011f\u0131l\u0131mlar\u0131n\u0131n analizini kolayla\u015ft\u0131r\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >\ud83d\udef3 Firewall Politikalar\u0131yla Desteklenebilir:<\/strong>\u00a0DHCP portlar\u0131 (UDP 67\u201368) yaln\u0131zca yetkili site DHCP sunucular\u0131na a\u00e7\u0131k tutularak s\u0131n\u0131rlama sa\u011flanabilir.<\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\u26a0\ufe0f Dikkat Edilmesi Gerekenler<\/h1> <ul > <li   data-selectable-paragraph=\"\"><strong >Relay Agent\u2019lar \u00fczerinden gelen trafi\u011fin kayna\u011f\u0131 dikkatle izlenmelidir.<\/strong>\u00a0Yanl\u0131\u015f konfig\u00fcrasyonlar, \u015f\u00fcpheli IP al\u0131mlara sebep olabilir.<\/li> <li   data-selectable-paragraph=\"\"><strong >Authorized DHCP listesi periyodik olarak denetlenmeli ve sadece g\u00fcvenli sunucular dahil edilmelidir.<\/strong><\/li> <li   data-selectable-paragraph=\"\"><strong >Rogue sunucu tespiti i\u00e7in Windows Event ID 1046 ve 1058 gibi log kay\u0131tlar\u0131 takip edilmelidir.<\/strong><\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\ud83d\udcbb \u00d6rnek Kullan\u0131m<\/h1> <h1   data-selectable-paragraph=\"\">\ud83c\udfdb\ufe0f Senaryo: \u00c7ok Lokasyonlu Banka Altyap\u0131s\u0131<\/h1> <p   data-selectable-paragraph=\"\">Bir bankan\u0131n \u00f6rne\u011fin \u0130stanbul, Ankara ve \u0130zmir olmak \u00fczere \u00fcc farkl\u0131 \u015fubesi bulunmaktad\u0131r. Her \u015fube kendi fiziki lokasyonunda hizmet veren Active Directory site yap\u0131s\u0131na sahiptir:<\/p> <ul > <li   data-selectable-paragraph=\"\"><strong >IST Site<\/strong>: 10.0.0.0\/24 subnet\u2019i \u00fczerinden hizmet verir.<\/li> <li   data-selectable-paragraph=\"\"><strong >ANK Site<\/strong>: 10.1.0.0\/24 subnet\u2019i.<\/li> <li   data-selectable-paragraph=\"\"><strong >IZM Site<\/strong>: 10.2.0.0\/24 subnet\u2019i.<\/li> <\/ul> <p   data-selectable-paragraph=\"\">Her site\u2019da kendine ait DHCP sunucusu bulunur ve yaln\u0131zca o site i\u00e7in tan\u0131ml\u0131 scope vard\u0131r. \u0130stanbul\u2019daki istemci \u015fu \u015fekilde davran\u0131r:<\/p> <ol > <li   data-selectable-paragraph=\"\">DHCPDISCOVER paketi \u00fcretir.<\/li> <li   data-selectable-paragraph=\"\">Bu paket, giaddr alan\u0131 sayesinde 10.0.0.0\/24 subnet\u2019ine ait oldu\u011funu belirtir.<\/li> <li   data-selectable-paragraph=\"\">DHCP sunucusu, bu subnet\u2019in IST site\u2019a ait oldu\u011funu alg\u0131lar.<\/li> <li   data-selectable-paragraph=\"\">Di\u011fer site\u2019lardaki DHCP sunucular\u0131 bu pakete yan\u0131t vermez.<\/li> <li   data-selectable-paragraph=\"\">IST DHCP sunucusu, scope\u2019tan bir IP tahsis eder.<\/li> <\/ol> <p   data-selectable-paragraph=\"\">Bu yap\u0131 sayesinde IP da\u011f\u0131t\u0131m\u0131 hem co\u011frafi hem mant\u0131ksal olarak d\u00fczenlenmi\u015f olur. WAN hatt\u0131 kullan\u0131lmaz, yanl\u0131\u015f IP atanmas\u0131 \u00f6nlenir, merkezi loglama ve takip sa\u011flan\u0131r.<\/p> <h1   data-selectable-paragraph=\"\">\ud83d\udcd8 A\u00e7\u0131klamalar<\/h1> <h1   data-selectable-paragraph=\"\">\ud83d\udca1 Temel Terimler ve Kavramlar<\/h1> <ul > <li   data-selectable-paragraph=\"\"><strong >giaddr (Gateway IP Address):<\/strong>\u00a0DHCPDISCOVER paketinde yer al\u0131r, relay agent IP\u2019sini temsil eder ve istemcinin ait oldu\u011fu subnet bilgisine ula\u015f\u0131lmas\u0131n\u0131 sa\u011flar.<\/li> <li   data-selectable-paragraph=\"\"><strong >DHCP Relay Agent:<\/strong>\u00a0\u0130stemciden gelen yay\u0131n paketlerini L3 ge\u00e7i\u015fiyle DHCP sunucusuna ileten a\u011f cihaz\u0131d\u0131r. Router, switch veya firewall olabilir.<\/li> <li   data-selectable-paragraph=\"\"><strong >AD Sites and Services:<\/strong>\u00a0Subnet-to-site e\u015fle\u015fmesinin yap\u0131ld\u0131\u011f\u0131 Active Directory bile\u015fenidir. Buradaki do\u011fruluk Site-Aware DHCP i\u00e7in kritiktir.<\/li> <li   data-selectable-paragraph=\"\"><strong >Scope:<\/strong>\u00a0DHCP sunucusu \u00fczerinde tan\u0131mlanan IP aral\u0131\u011f\u0131d\u0131r. Her site\u2019a \u00f6zg\u00fc scope olu\u015fturulmal\u0131d\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >Authorized DHCP:<\/strong>\u00a0Domain ortam\u0131na dahil edilmi\u015f ve Active Directory taraf\u0131ndan yetkilendirilmi\u015f DHCP sunucusudur. Site-Aware DHCP yaln\u0131zca authorized sunucularda etkin \u00e7al\u0131\u015f\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >Option 82 (Relay Agent Info):<\/strong>\u00a0Geli\u015fmi\u015f a\u011f yap\u0131land\u0131rmalar\u0131nda DHCP relay cihaz\u0131 taraf\u0131ndan eklenen ek bilgi alan\u0131d\u0131r. giaddr\u2019den daha detayl\u0131 kimlik bilgileri sa\u011flayabilir.<\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\ud83e\udd48 Kullan\u0131m Senaryolar\u0131<\/h1> <h1   data-selectable-paragraph=\"\">\ud83c\udfe2 1. Kurumsal \u015eube A\u011f\u0131<\/h1> <p   data-selectable-paragraph=\"\">Birden fazla \u015fubeye sahip kurumlarda (banka, hastane, sigorta, kamu kurumlar\u0131 vb.) her lokasyonun ayr\u0131 bir AD site olarak tan\u0131mland\u0131\u011f\u0131 senaryolarda, Site-Aware DHCP uyguland\u0131\u011f\u0131nda IP da\u011f\u0131t\u0131m\u0131 do\u011fru site \u00fczerinden yap\u0131l\u0131r. WAN \u00fczerinden merkezdeki DHCP sunucusuna ba\u011flanmak yerine, yerel DHCP sunucusu devreye girer.<\/p> <h1   data-selectable-paragraph=\"\">\ud83c\udfd7\ufe0f 2. DRC (Disaster Recovery Center) Senaryosu<\/h1> <p   data-selectable-paragraph=\"\">Felaket kurtarma merkezi olan yap\u0131larda DRC site\u2019lar\u0131n ayr\u0131 subnet ve DHCP scope\u2019lar\u0131 olmal\u0131d\u0131r. Site-Aware DHCP sayesinde, DRC ortam\u0131ndaki istemciler otomatik olarak DRC\u2019deki DHCP sunucusundan IP alarak \u00e7al\u0131\u015fmaya devam eder.<\/p> <h1   data-selectable-paragraph=\"\">\ud83d\ude80 3. Campus Network Mimarisi<\/h1> <p   data-selectable-paragraph=\"\">B\u00fcy\u00fck \u00fcniversite kamp\u00fcsleri, \u00fcretim binalar\u0131, yurtlar ve ofisler gibi farkl\u0131 binalara ayr\u0131l\u0131yorsa, her b\u00f6lgeye \u00f6zg\u00fc site ve DHCP scope tan\u0131mlar\u0131 yap\u0131labilir. Bu sayede \u00f6\u011frenciler ve personel do\u011fru IP aral\u0131klar\u0131ndan hizmet al\u0131r.<\/p> <h1   data-selectable-paragraph=\"\">\ud83d\udea7 4. VLAN Ayr\u0131\u015fmas\u0131 Gerektiren Ortamlar<\/h1> <p   data-selectable-paragraph=\"\">Farkl\u0131 VLAN\u2019lar\u0131n farkl\u0131 AD site\u2019lara denk geldi\u011fi yap\u0131larda Site-Aware DHCP, yay\u0131n trafi\u011fini azaltmak ve segmentasyon g\u00fcvenli\u011fini korumak ad\u0131na etkin kullan\u0131labilir.<\/p> <h1   data-selectable-paragraph=\"\">\ud83c\udfd9\ufe0f 5. Uluslararas\u0131 Yap\u0131lar<\/h1> <p   data-selectable-paragraph=\"\">Birden fazla \u00fclkede ofisi bulunan \u015firketler, her \u00fclke veya veri merkezi i\u00e7in ayr\u0131 subnet\/site ve DHCP scope tan\u0131mlayarak site fark\u0131ndal\u0131 \u00e7al\u0131\u015fmayla WAN bant geni\u015fli\u011fini daha verimli kullanabilir.<\/p> <h1   data-selectable-paragraph=\"\">\ud83d\udd00 Alternatif Y\u00f6ntemler \/ Kar\u015f\u0131la\u015ft\u0131rma<\/h1> <figure > <div  tabindex=\"0\" role=\"button\"> <div ><picture><source srcset=\"https:\/\/miro.medium.com\/v2\/resize:fit:640\/format:webp\/1*Rh-JBydnvs9WsMZAu0357Q.png 640w, https:\/\/miro.medium.com\/v2\/resize:fit:720\/format:webp\/1*Rh-JBydnvs9WsMZAu0357Q.png 720w, https:\/\/miro.medium.com\/v2\/resize:fit:750\/format:webp\/1*Rh-JBydnvs9WsMZAu0357Q.png 750w, https:\/\/miro.medium.com\/v2\/resize:fit:786\/format:webp\/1*Rh-JBydnvs9WsMZAu0357Q.png 786w, https:\/\/miro.medium.com\/v2\/resize:fit:828\/format:webp\/1*Rh-JBydnvs9WsMZAu0357Q.png 828w, https:\/\/miro.medium.com\/v2\/resize:fit:1100\/format:webp\/1*Rh-JBydnvs9WsMZAu0357Q.png 1100w, https:\/\/miro.medium.com\/v2\/resize:fit:1400\/format:webp\/1*Rh-JBydnvs9WsMZAu0357Q.png 1400w\" type=\"image\/webp\" sizes=\"(min-resolution: 4dppx) and (max-width: 700px) 50vw, (-webkit-min-device-pixel-ratio: 4) and (max-width: 700px) 50vw, (min-resolution: 3dppx) and (max-width: 700px) 67vw, (-webkit-min-device-pixel-ratio: 3) and (max-width: 700px) 65vw, (min-resolution: 2.5dppx) and (max-width: 700px) 80vw, (-webkit-min-device-pixel-ratio: 2.5) and (max-width: 700px) 80vw, (min-resolution: 2dppx) and (max-width: 700px) 100vw, (-webkit-min-device-pixel-ratio: 2) and (max-width: 700px) 100vw, 700px\" \/><source srcset=\"https:\/\/miro.medium.com\/v2\/resize:fit:640\/1*Rh-JBydnvs9WsMZAu0357Q.png 640w, https:\/\/miro.medium.com\/v2\/resize:fit:720\/1*Rh-JBydnvs9WsMZAu0357Q.png 720w, https:\/\/miro.medium.com\/v2\/resize:fit:750\/1*Rh-JBydnvs9WsMZAu0357Q.png 750w, https:\/\/miro.medium.com\/v2\/resize:fit:786\/1*Rh-JBydnvs9WsMZAu0357Q.png 786w, https:\/\/miro.medium.com\/v2\/resize:fit:828\/1*Rh-JBydnvs9WsMZAu0357Q.png 828w, https:\/\/miro.medium.com\/v2\/resize:fit:1100\/1*Rh-JBydnvs9WsMZAu0357Q.png 1100w, https:\/\/miro.medium.com\/v2\/resize:fit:1400\/1*Rh-JBydnvs9WsMZAu0357Q.png 1400w\" sizes=\"(min-resolution: 4dppx) and (max-width: 700px) 50vw, (-webkit-min-device-pixel-ratio: 4) and (max-width: 700px) 50vw, (min-resolution: 3dppx) and (max-width: 700px) 67vw, (-webkit-min-device-pixel-ratio: 3) and (max-width: 700px) 65vw, (min-resolution: 2.5dppx) and (max-width: 700px) 80vw, (-webkit-min-device-pixel-ratio: 2.5) and (max-width: 700px) 80vw, (min-resolution: 2dppx) and (max-width: 700px) 100vw, (-webkit-min-device-pixel-ratio: 2) and (max-width: 700px) 100vw, 700px\" data-test \/><img  role=\"presentation\" src=\"https:\/\/miro.medium.com\/v2\/resize:fit:700\/1*Rh-JBydnvs9WsMZAu0357Q.png\" alt=\"\" width=\"700\" height=\"365\" \/><\/picture><\/div> <\/div><\/figure> <h1   data-selectable-paragraph=\"\">\ud83d\udcc5 Kaynaklar \/ \u0130ndirme Linkleri<\/h1> <ul > <li   data-selectable-paragraph=\"\"><a  href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/networking\/technologies\/dhcp\/dhcp-subnet-selection\" target=\"_blank\" rel=\"noopener ugc nofollow\">Microsoft Docs: DHCP and Active Directory Sites<\/a><\/li> <li   data-selectable-paragraph=\"\"><a  href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/networking\/technologies\/dhcp\/dhcp-overview\" target=\"_blank\" rel=\"noopener ugc nofollow\">DHCP Fundamentals<\/a><\/li> <li   data-selectable-paragraph=\"\"><a  href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc2131.html\" target=\"_blank\" rel=\"noopener ugc nofollow\">RFC 2131 \u2014 Dynamic Host Configuration Protocol<\/a><\/li> <li   data-selectable-paragraph=\"\"><a  href=\"https:\/\/techcommunity.microsoft.com\/t5\/core-infrastructure-and-security\/security-best-practices-for-dhcp\/ba-p\/2563762\" target=\"_blank\" rel=\"noopener ugc nofollow\">DHCP Security Best Practices<\/a><\/li> <li   data-selectable-paragraph=\"\"><a  href=\"https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/dcn\/nx-os\/nexus3548\/103x\/configuration\/security\/cisco-nexus-3548-nx-os-security-configuration-guide-103x\/m-configuring-dhcp-snooping.pdf\" target=\"_blank\" rel=\"noopener ugc nofollow\">DHCP Snooping Configuration Guide \u2014 Cisco<\/a><\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\ud83d\udcc5 Notlar<\/h1> <ul > <li   data-selectable-paragraph=\"\">Site-Aware DHCP yap\u0131s\u0131n\u0131n do\u011fru \u00e7al\u0131\u015fmas\u0131 i\u00e7in subnet-to-site haritalamas\u0131 kritik \u00f6neme sahiptir.<\/li> <li   data-selectable-paragraph=\"\">AD Sites and Services yap\u0131s\u0131 periyodik olarak g\u00f6zden ge\u00e7irilmeli, yeni subnet\u2019ler eklendik\u00e7e site tan\u0131mlar\u0131 g\u00fcncellenmelidir.<\/li> <li   data-selectable-paragraph=\"\">Her DHCP sunucusunun yaln\u0131zca kendi site\u2019\u0131na ait scope\u2019a sahip olmas\u0131 tavsiye edilir.<\/li> <li   data-selectable-paragraph=\"\">DHCP sunucular\u0131 authorized edilmeden IP da\u011f\u0131tamaz, bu da g\u00fcvenlik a\u00e7\u0131s\u0131ndan avantajl\u0131d\u0131r.<\/li> <li   data-selectable-paragraph=\"\">DHCP relay agent kullan\u0131lacaksa giaddr alan\u0131n\u0131 do\u011fru iletti\u011finden emin olunmal\u0131d\u0131r.<\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\u26a0\ufe0f Dikkat Edilmesi Gerekenler<\/h1> <ul > <li   data-selectable-paragraph=\"\"><strong >Subnet-to-site mapping hatalar\u0131<\/strong>, istemcilerin IP alamamas\u0131na neden olabilir. Tan\u0131mlar dikkatle kontrol edilmelidir.<\/li> <li   data-selectable-paragraph=\"\"><strong >Scope \u00e7ak\u0131\u015fmas\u0131na kar\u015f\u0131<\/strong>, IP aral\u0131klar\u0131n\u0131n her site i\u00e7in benzersiz olmas\u0131 sa\u011flanmal\u0131d\u0131r.<\/li> <li   data-selectable-paragraph=\"\"><strong >DHCP loglar\u0131<\/strong>, hangi istemcinin nereden IP ald\u0131\u011f\u0131n\u0131 analiz etmek i\u00e7in periyodik olarak incelenmelidir.<\/li> <li   data-selectable-paragraph=\"\"><strong >DHCP failover yedeklili\u011fi<\/strong>, Site-Aware DHCP ile birlikte d\u00fc\u015f\u00fcn\u00fclmelidir.<\/li> <li   data-selectable-paragraph=\"\"><strong >Relay cihazlar\u0131n giaddr alan\u0131n\u0131 eksik iletmesi<\/strong>, Site-Aware \u00e7al\u0131\u015fmas\u0131n\u0131 engeller.<\/li> <\/ul> <h1   data-selectable-paragraph=\"\">\ud83c\udf1f Sonu\u00e7<\/h1> <p   data-selectable-paragraph=\"\">Site-Aware DHCP, Active Directory ortam\u0131nda DHCP da\u011f\u0131t\u0131m\u0131n\u0131 daha ak\u0131ll\u0131, performansl\u0131 ve y\u00f6netilebilir hale getiren etkili bir teknolojidir. \u0130stemcilerin fiziksel veya topolojik olarak en yak\u0131n DHCP sunucusundan IP almas\u0131, sadece verimlilik de\u011fil ayn\u0131 zamanda g\u00fcvenlik ve izlenebilirlik a\u00e7\u0131s\u0131ndan da b\u00fcy\u00fck avantaj sa\u011flar.<\/p> <p   data-selectable-paragraph=\"\">Gerekli olan tek \u015fey subnet-to-site e\u015fle\u015fmesinin do\u011fru yap\u0131lmas\u0131, scope\u2019lar\u0131n dikkatli tan\u0131mlanmas\u0131 ve DHCP sunucular\u0131n\u0131n domain yap\u0131s\u0131na entegre edilmesidir. Site-Aware DHCP ile IP da\u011f\u0131t\u0131m mimariniz hem merkezi hem de da\u011f\u0131t\u0131k yap\u0131lara uygun hale gelir.<\/p> <h1   data-selectable-paragraph=\"\">\ud83e\udde1 Kapan\u0131\u015f Yorumu<\/h1> <p   data-selectable-paragraph=\"\">Birden fazla lokasyonun bulundu\u011fu altyap\u0131larda DHCP trafi\u011fini etkin y\u00f6netmek, hem performans hem de g\u00fcvenlik a\u00e7\u0131s\u0131ndan \u00f6nemlidir. Site-Aware DHCP bu amaca do\u011fru \u015fekilde hizmet eden yal\u0131n ama etkili bir yakla\u015f\u0131md\u0131r. \u0130stemcilerin do\u011fru DHCP sunucusundan IP alarak ba\u011flant\u0131 kurmas\u0131, WAN bant geni\u015fli\u011finin verimli kullan\u0131lmas\u0131n\u0131 sa\u011flar, broadcast trafi\u011fini s\u0131n\u0131rlar ve DHCP altyap\u0131s\u0131n\u0131 daha izlenebilir hale getirir.<\/p> <p   data-selectable-paragraph=\"\">Bu yaz\u0131 ile Site-Aware DHCP\u2019nin sadece bir \u201cekstra fonksiyon\u201d de\u011fil, do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda altyap\u0131da fark yaratan bir mimari prensip oldu\u011funu ortaya koyduk. Active Directory entegrasyonu, DHCP yetkilendirmesi, subnet-to-site e\u015fle\u015fmesi ve scope tasar\u0131m\u0131 gibi bilesenlerin ne kadar kritik oldu\u011funu detaylar\u0131yla g\u00f6rd\u00fck.<\/p> <p   data-selectable-paragraph=\"\">Kurumlar i\u00e7in uzun vadede daha y\u00fcksek performans, azalan destek ihtiyac\u0131 ve artan kontrol seviyesi anlam\u0131na gelen bu yap\u0131, her IT altyap\u0131 y\u00f6neticisinin g\u00fcvenle uygulayabilece\u011fi bir stratejidir.<\/p> <h1   data-selectable-paragraph=\"\">\ud83d\udcca CTA<\/h1> <p   data-selectable-paragraph=\"\">Altyap\u0131n\u0131zda DHCP trafi\u011fini optimize etmek ve WAN y\u00fcklerini azaltmak istiyorsan\u0131z, \u015fimdi subnet-to-site e\u015fle\u015fmesini g\u00f6zden ge\u00e7irme ve DHCP sunucular\u0131n\u0131n yetkilendirme durumunu kontrol etme zaman\u0131.<\/p> <p   data-selectable-paragraph=\"\">\u2728 Daha verimli, daha<\/p>","excerpt":"Modern \u015firket altyap\u0131lar\u0131nda birden fazla lokasyonda hizmet veren istemcilerin, IP adreslerini bulunduklar\u0131 fiziksel veya topolojik konuma en...","created_at":"2025-06-09 23:24:31","updated_at":"2026-09-07 11:25:51","category_id":6,"view_count":714,"reading_time":12,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-06-09 23:24:31","featured_image":"resimyok.jpg","slug":"site-aware-dhcp-ile-lokasyon-bazli-ip-dagitimi","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}