[Question] Block rogue DHCP server in Firewall

Going to post this here instead of deep into a thread as a child... but here are my thoughts.

I think your assumption that this is a DHCP issue is incorrect.

Looking through the documentation for Lenovo's current USB C Ethernet adapter and I can't find anything that would suggest a true OEM one being capable of doing what you've described... if you can dig up proof that it is somehow acting as a DHCP server I would immediately remove it from production and see if it was somehow modified. I think the chances of this are astronomically low... and if you worked in a role where someone might attempt to target you with modified hardware you wouldn't be posting about it on Reddit haha

My gut instinct is this is a broadcast storm... while I've never experienced the issue you can search around and find many examples of powered off USB C/3.x ethernet equipped devices causing broadcast storms. Based on your other replies it sounds like you're running a very basic flat network... so it would make sense that "all" of your devices have been impacted by this.

/r/Ubiquiti Thread