|
Chapter 5: Implementing the Dynamic Host Configuration Protocol
Chapter 5 Implementing the Dynamic Host Configuration ProtocolAbout This ChapterDynamic Host Configuration Protocol (DHCP) is a service that enables computers on a network to automatically request and receive Transmission Control Protocol/Internet Protocol (TCP/IP) configuration settings from a central server, rather than through a manual configuration process. Using DHCP relieves network administrators of several onerous chores, including the assignment and tracking of IP addresses and the need to travel to each computer to configure it individually. In this chapter, you learn how DHCP works and how to implement it on your own network.
Before You BeginTo fully understand the benefits of DHCP, you should be familiar with the TCP/IP protocols and particularly with the IP addressing process, as discussed in Chapter 2, "Introducing TCP/IP." To perform the exercises in this chapter, you must have two Microsoft Windows 2000 computers connected to a local area network (LAN). One of the computers must be running Windows 2000 Server and have Network Monitor installed; the other computer can be running any version of Windows 2000 and must be configured to function as a DHCP client.
Lesson 1: Introducing DHCPThe use of the TCP/IP protocol suite on a private network provides a number of distinct advantages, such as the ability of the protocols to support any computing platform. The main element that provides this cross-platform interoperability is the independent IP addressing scheme that uniquely identifies every computer on the network. Unfortunately, this great advantage is also the cause of a major administrative problem. Assigning unique IP addresses to every computer on a large network is difficult, and manually configuring every computer to use those addresses is extremely time-intensive and labor-intensive. As a solution to this problem, DHCP automates the IP address assignment process and eliminates the need to configure every TCP/IP computer on the network.
After this lesson, you will be able to
Estimated lesson time: 45 minutes
Understanding the Origins of DHCPThe roots of DHCP began in the days when it was common to use diskless workstationsthat is, computers with no disk driveson local area networks for economic reasons. To use a diskless workstation on a TCP/IP network, the computer still had to have a unique IP address, so a group of developers created a protocol called the Reverse Address Resolution Protocol (RARP) to make IP address assignment possible. RARP is standardized in a Request For Comments (RFC) document, published by the Internet Engineering Task Force (IETF), called RFC 903. It is closely related to the Address Resolution Protocol (ARP) still used on TCP/IP networks today. The difference between the two is that with RARP, a computer transmits a message containing its data-link layer hardware address to a server and receives in reply a message containing an IP address for it to use. ARP, by contrast, is used to resolve IP addresses into hardware addresses.A RARP server uses the same message format as ARP and is a simple mechanism for assigning IP addresses over the network. RARP is insufficient for the configuration of a modern TCP/IP client, however, for several reasons. Chief among these is that RARP assigns a workstation an IP address only; it cannot assign a subnet mask or other TCP/IP configuration parameters. Also, an administrator must configure a RARP server with the individual IP address assignments, so it provides no help in tracking address assignments. The next step in the development of an automated TCP/IP configuration solution is called the Bootstrap Protocol (BOOTP), which is based on a standard published as RFC 951 with extensions in the RFC 1533 and RFC 1542 documents. BOOTP offers several improvements over RARP, including the ability to supply clients with subnet masks, router addresses, and other TCP/IP configuration parameters in addition to IP addresses. Diskless workstations can also download an executable boot file from a BOOTP server using the Trivial File Transfer Protocol (TFTP). BOOTP messages are carried in User Datagram Protocol (UDP) datagrams, whereas RARP messages are carried directly in data-link layer protocol frames. BOOTP also has a mechanism to support clients on other LANs through the use of BOOTP relay agents, which forward messages to a BOOTP server on another network. The drawback of BOOTP, as with RARP, is that an administrator must create a configuration for each client on the BOOTP server. BOOTP therefore does nothing to prevent configuration errors such as duplicate or incorrect IP addresses. To address these shortcomings, a group of developers set out to define an improvement to BOOTP that would provide a complete, automated TCP/IP client configuration solution. The result was the Dynamic Host Configuration Protocol (DHCP), as defined in RFC 2131. The developers' design goals in creating DHCP included the following:
The resulting DHCP mechanism is a combination of a client/server application and a protocol that performs two basic tasks: IP address assignment and configuration of other TCP/IP client parameters. As illustrated in Figure 5.1, each time a DHCP client starts, it requests IP addressing information from a DHCP server, including the IP address, the subnet mask, and optional values. The optional values might include a default gateway address, Domain Name System (DNS) address, and Windows Internet Name Service (WINS) server address. Figure 5.1 How a DHCP client interacts with a DHCP server When a DHCP server receives a request, it selects IP addressing information from a pool of addresses defined in its database and offers it to the DHCP client. If the client accepts the offer, the IP addressing information is leased to the client for a specified period of time. If no available IP addressing information is in the pool to lease to a client, the client cannot initialize TCP/IP. Assigning IP Addresses To assign IP addresses to clients, DHCP uses a pool of addresses called a scope. When you configure the DHCP server, you create a scope consisting of a range of IP addresses for each of your subnets. When a DHCP client requests an address from a DHCP server, the server assigns an address from the appropriate scope and updates its internal database to show that address as being in use. This is an improvement over BOOTP, which relies on an administrator to configure the server with an IP address for each client. A DHCP server cannot assign the same IP address to two different computers and continuously maintains a record of addresses currently in use. To fulfill the developers' intentions, DHCP can assign IP addresses using three methods:
Configuring TCP/IP Parameters IP address assignment is only a part of DHCP's functionality. To support large network installations, TCP/IP client workstations have to be assigned a subnet mask and usually other settings, such as default gateway and DNS server addresses, as well. DHCP makes this possible by providing support for a large number of options that correspond to the configuration parameters for a wide variety of DHCP client configurations. The object is to provide support for all the possible TCP/IP configuration parameters required by the many computing platforms that use DHCP. DHCP also supports a vendor-specific information option that enables third-party developers and network administrators to create customized options that they can apply to specific clients. RFC 2132, "DHCP Options and BOOTP Vendor Extensions," contains a list of the options that DHCP server implementations should support. Vendors can submit options designed to support their products for evaluation and inclusion in the document.
DHCP MessagingDHCP consists of the following three parts:
DHCP is an application layer protocol that generates messages that are transmitted using UDP. Both the DHCP client and the DHCP server have well-known port numbers assigned to them. The DHCP client uses port 68 and the DHCP server uses port 67. These are the same port numbers used by BOOTP, which is one factor that helps DHCP servers provide support for earlier BOOTP clients. DHCP clients and servers use just one basic message format for their communications, which is illustrated in Figure 5.2. Figure 5.2 The DHCP message format The functions of the message fields are as follows:
The Options field is where DHCP messages carry all the TCP/IP configuration parameters other than the IP address. The field can contain multiple options, each of which (in most cases) consists of three subfields (see Figure 5.3). Figure 5.3 The DHCP Option field format The three subfields of the Options field are as follows:
DHCP messages can carry a great many options in the Options field, some of which are listed in the following sections. The Message Type Option Although it sounds like a contradiction in terms, one option is required in every DHCP message. This is the DHCP Message Type option, which contains a code that specifies the function of each message. This option has eight possible values, as follows:
The Pad Option The Pad option does not use the three subfields listed earlier and does not carry any additional information. The option consists of a 1-byte code field with a value of 0 that the transmitting computer uses to pad out other options so that their boundaries fall between 8-byte words. The End Option The End option indicates the end of the Options field. The Option Overload Option When a DHCP message includes a large number of options, it can exceed the maximum size of the Options field, which is itself limited by the 576-byte maximum size for an IP datagram. To carry the maximum amount of option information in a message, it's possible for the transmitting system to utilize the Sname and File fields to carry additional options. These two fields are holdovers from BOOTP that are rarely used today. By including the Option Overload option, the transmitting computer can specify whether the Sname field, the File field, or both, carry option information. Together, these two fields can hold an extra 192 bytes of option information. BOOTP Vendor Information Extensions RFC 2132 is the latest version of a document that has undergone several revisions and updates over the years. The original version of the document, RFC 1497, contained the most basic of the DHCP options, the ones that you are most likely to use today to support your TCP/IP clients. In addition to the Pad and End options already discussed, these original DHCP options include the following:
The Vendor-Specific Information Option The Vendor-Specific Information option is designed to enable third-party developers to use DHCP to deliver configuration information required for their products. The option can itself contain multiple options, each of which has its own Code, Length, and Data field, plus an End option to indicate the end of the vendor-specific options. To ensure that the vendor-specific option information is delivered only to the computers using the vendor's product, you assign a unique value to those systems using the Vendor Class Identifier option in the DHCP messages. You then configure the DHCP clients using the vendor's product with the same class identifier so that they know to process the vendor-specific options. Other Options The other options defined in the RFC 2132 document are grouped into several different categories, such as the following:
Although most, if not all, DHCP server implementations support the use of all these options, not all DHCP clients can process them, even if the option represents a configurable parameter on the client computer. In other words, even though you might be able to manually modify the ARP cache timeout setting on a given workstation, this does not necessarily mean that including the DHCP ARP Cache Timeout option in your DHCP messages can automatically configure that setting.
Understanding DHCP CommunicationsActivating a DHCP client causes it to initiate communications with DHCP servers whenever the computer starts, as illustrated in Figure 5.4. The client generates a series of DHCP packets using the DHCPDISCOVER message type, which it transmits as broadcasts. The function of these messages is to locate DHCP servers and to request an IP address assignment from them. Broadcasts are the client's only option at this point because it has no IP address yet, and it is therefore said to be in the init state. Like all broadcasts, these transmissions are limited to the client's local network and, under normal conditions, reach only the DHCP servers located on that network. However, administrators can install a DHCP Relay Agent service on a computer on the LAN, which relays the DHCPDISCOVER messages to DHCP servers on other networks. This enables a single DHCP server to service clients on multiple LANs.When a DHCP server receives a DHCPDISCOVER message from a client, it generates a response using the DHCPOFFER message type, containing an IP address and whatever other DHCP options the server is configured to supply. How the server transmits the DHCPOFFER message to the client is determined by a variety of factors. Chief among these is the state of the "broadcast bit," which is included in the Flags field of the DHCPDISCOVER message. This bit indicates whether the server should transmit its responses as broadcasts or unicasts. In most cases, the server transmits the DHCPOFFER message as a broadcast, because the client still does not have an IP address that the server can use for a unicast transmission. If the broadcast bit is not enabled, however, the server can generate a unicast transmission, using the IP address it is offering (found in the Yiaddr field) and the data-link layer hardware address specified in the Chaddr field of the DHCPDISCOVER message. Figure 5.4 DHCP client/server communications When the server receives the DHCPDISCOVER message through a DHCP relay agent, the server sends the DHCPOFFER message as a unicast to the relay agent address specified in the Giaddr field, and the relay agent either broadcasts or unicasts it to the client, based on the same criteria. It is also possible for a DHCP client to request a specific IP address in its DHCPDISCOVER messages by including an address in the Ciaddr field. The server can then send its DHCPOFFER messages as unicasts directly to the client using that address. The internal behavior of a server when it offers an IP address and other configuration parameters to a client is left up to the individual implementation. In some cases, the server checks that the address it intends to offer is not already in use by transmitting an Internet Control Message Protocol (ICMP) Echo Request message to that address and then waiting to make sure that no reply arrives. The server also might reserve the offered address until it receives a response from the client. Because the client broadcasts its DHCPDISCOVER messages, more than one server might receive them, and the client might therefore receive DHCPOFFER responses from multiple servers. After a specified period of time, the client stops its broadcasting and accepts one of the offered IP addresses. To signal its acceptance, the client generates a DHCPREQUEST message, which includes the address of the server from which it is accepting the offer in the Server Identifier option, along with the offered IP address in the Requested IP Address option. The client always transmits the DHCPREQUEST message as a broadcast, both because it is not yet configured to use the offered IP address and to inform the other DHCP servers that it is rejecting their offers. If the client receives no DHCPOFFER message in response to a DHCPDISCOVER message, it times out and repeats the DHCPDISCOVER broadcast. If, after repeated DHCPDISCOVER broadcasts, the client receives no DHCPOFFER messages in response, the DHCP address assignment procedure is considered to have failed. In some cases, client computers are permitted no further TCP/IP communications except for repeated DHCPDISCOVER broadcasts at regular intervals. In other cases (as with most of the Windows operating systems), the client automatically assigns itself an IP address, which might or might not enable it to interact with other computers on the network. On receipt of the DHCPREQUEST message, the server whose offer the client is accepting commits the offered IP address and other settings to its database using a combination of the client's hardware address and the offered IP address as a unique identifier for the assignment. This is known as the lease identification cookie. To conclude its part of the transaction, the server sends a DHCPACK message to the client, which contains the same offered IP address and other options as in the DHCPOFFER message. This acknowledges the server's completion of the address assignment process. If the server cannot complete the assignment (because it has already assigned the offered IP address to another system, for example), it transmits a DHCPNAK message to the client and the whole process begins again with DHCPDISCOVER broadcasts. After receiving a DHCPACK message from the server, the client performs a final test by generating a series of ARP broadcasts to ensure that no other system on the network is using the assigned IP address. If the DHCP client receives no response to the ARP transmissions, it configures the TCP/IP client with the IP address and other settings obtained by the server and notes the length of the lease that the server has offered. At this point the client enters what is known as the bound state. If another computer on the network does respond to the ARP broadcasts, the client cannot use the offered IP address and transmits a DHCPDECLINE message to the server, nullifying the transaction. The client can then reissue a series of DHCPDISCOVER messages, restarting the whole process.
DHCP Leasing The process by which a DHCP server assigns configuration parameters to a client is the same whether the server uses manual, automatic, or dynamic allocation. With manual and automatic allocation, the process described in the previous section is the end of the automated DHCP client/server communications. The client retains the settings assigned to it by the server until someone explicitly changes them or forces a reassignment. However, when the server uses dynamic allocation, the client leases its IP address for a certain period of time (configured at the server) and must periodically renew the lease to continue using it. The length of an IP address lease is typically measured in days and is usually based on whether computers are frequently moved to different subnets (requiring a new IP address) or whether IP addresses are in short supply. Shorter leases generate more network traffic but enable servers to reclaim unused addresses faster. For a relatively stable network, longer leases reduce the amount of traffic that DHCP generates. The lease renewal process, illustrated in Figure 5.5, begins when a bound client reaches what is known as the renewal time value, or T1 value, of its lease. By default, the renewal time value is 50 percent of the lease period. When a client reaches this point, it enters the renewing state and begins generating DHCPREQUEST messages. The client transmits the messages to the server that holds the lease as unicasts, unlike the broadcast DHCPREQUEST messages the client generates while in the init state. If the server is available to receive the message, it responds with either a DHCPACK message, which renews the lease and restarts the lease time clock, or a DHCPNAK message, which terminates the lease and forces the client to begin the address assignment process again from the beginning. The most common reason for a DHCPNAK message is that the client computer has been moved to a different subnet and its IP address is no longer valid. Figure 5.5 The DHCP lease renewal process If the server does not respond to the DHCPREQUEST unicast message, the client continues to send requests at regular intervals until it reaches the rebinding time value or T2 value, which defaults to 87.5 percent of the lease period. At this point, the client enters the rebinding state and begins transmitting DHCPREQUEST messages as broadcasts, soliciting an address assignment from any DHCP server on the network. Again, a server can respond with either a DHCPACK or DHCPNAK message. If the lease time expires with no response from any DHCP server, the client's IP address is released and all its TCP/IP communication ceases, except for the transmission of DHCPDISCOVER broadcasts. Releasing an IP Address It is also possible for a client to terminate an IP address lease at any time by transmitting a DHCPRELEASE message containing the lease identification cookie to the server. On a Windows 2000 system, for example, you can do this manually, using the Ipconfig.exe utility.
Exercise 1: DHCP Message Types
Lesson Review
Lesson Summary
Lesson 2: Using the DHCP ServerThe DHCP standards define precisely the functions of DHCP servers and clients. DHCP clients are nearly always integrated into an operating system's TCP/IP implementation, but DHCP servers are available for many computing platforms, either as integrated components or separate products. All Windows operating systems include a DHCP client, which Windows uses by default. A DHCP server is included with all the Windows 2000 Server and Microsoft Windows NT Server products.
After this lesson, you will be able to
Estimated lesson time: 45 minutes
Implementing DHCPAlthough Windows DHCP clients naturally work well together with DHCP servers, it is also possible for a Windows 2000 DHCP server to support clients running other operating systems and for Windows clients to function with other DHCP server implementations. You can therefore use the Windows 2000 DHCP servers for your entire network, even if you run various client operating systems.When planning a DHCP implementation, you must consider a number of factors, including the following:
Installing Windows 2000 DHCP ServerAlthough the DHCP client is an integral part of the Windows operating systems and is installed automatically with the TCP/IP protocols on every computer, installation of Windows 2000 DHCP Server is optional. You can elect to install the DHCP server during the operating system installation, or you can do it any time afterward. The process of installing the DHCP Server included with Windows 2000 and preparing it for use consists of the following steps:
To install the DHCP Server, use the following procedure:
Figure 5.6 The Windows Components Wizard
Figure 5.7 The Networking Services dialog box
When you restart the computer, the DHCP Server service will be running, and it will load every time you restart the server. You can modify the service's startup behavior by opening the Services console and changing its Startup Type value from Automatic to Manual or Disabled.
Authorizing a DHCP ServerThe Windows 2000 DHCP Server includes a feature that enables the computer to detect unauthorized DHCP servers, called rogues, and prevent them from starting. In the past, the existence of improperly configured DHCP servers on a network was a relatively common problem. The DHCP Server service is easily installed with the Windows 2000 operating system. If someone creates a scope using improper IP addresses or other bad TCP/IP configuration information and activates it, whether out of curiosity, experimentation, or malice, the result can be improperly configured and malfunctioning workstations all over the network.To prevent rogue DHCP servers from operating on a network, Windows 2000 requires each DHCP Server installation to be authorized with Active Directory. To be authorized, a computer running the DHCP Server service must be either an Active Directory domain controller or a member server. To authorize a DHCP server, use the following procedure:
Figure 5.8 The DHCP console with an unauthorized server
Figure 5.9 The DHCP console with an authorized server
When you authorize a DHCP server, its IP address is added to a list of authorized servers in the Active Directory database. Whenever a Windows 2000 DHCP server starts, it compiles a list of the other DHCP servers on the network by broadcasting DHCPINFORM messages that contain vendor-specific options recognized only by other Windows 2000 DHCP servers. The other servers on the network respond to the DHCPINFORM message with a DHCPACK message, also containing vendor-specific options that supply information about themselves. When the server has compiled a list of the other DHCP servers, it obtains the list of the authorized servers from an Active Directory domain controller. If the server's own address is on the list, it begins to service clients. If the server's address is not on the list, it does not service clients.
Creating a ScopeAfter a DHCP server is authorized, it is capable of functioning on the network, but it cannot actually service DHCP clients until it is configured with a scope of IP addresses to assign. When creating scopes, consider the following restrictions:
To create a scope, use the following procedure:
Figure 5.10 The Scope Name dialog box in the New Scope Wizard
Figure 5.11 The IP Address Range page in the New Scope Wizard
When you type the range of IP addresses in the Start IP Address and End IP Address boxes, the wizard automatically supplies values in the Length and Subnet Mask boxes, based on the class of the IP address values you specified. The only time you have to change these default subnet mask values is if you have subnetted your network by using a nonstandard number of bits in the network identifier of your IP addresses.
Figure 5.12 The Add Exclusions dialog box in the New Scope Wizard
Excluding multiple address ranges from the IP address range you originally supplied for the scope enables you to select any group of addresses you want for a particular subnet. To exclude a single address from the range, type the same value in the Start IP Address and End IP Address boxes. Figure 5.13 The Lease Duration page in the New Scope Wizard
The default IP address lease duration is 8 days. For a network in which computers (such as laptops and other portables) are frequently moved to other subnets, you can decrease the lease duration value. For more stable networks, you can increase the value. You cannot configure a scope with an unlimited lease (resulting in automatic allocation) using the New Scope Wizard. You can, however, modify the properties of the scope after you create it to change its lease duration to Unlimited. Figure 5.14 The Configure DHCP Options page in the New Scope Wizard
Answering Yes, I Want To Configure These Options Now causes the wizard to display four additional pages, enabling you to configure the Router (Default Gateway), Domain Name and DNS Servers, and WINS Servers options and to activate the scope. These are the most commonly used options on a typical TCP/IP network, and activating the scope completes the process of making the DHCP server functional and active. See the next section in this lesson for more information about configuring these options.
Figure 5.15 The DHCP console with a newly created scope
Activating a ScopeAfter you have created a scope, you must activate it before the server can use it to assign IP addresses to clients. To activate a scope, use the following procedure:
Figure 5.16 The DHCP console with a newly activated scope
Creating a SuperscopeA superscope is an administrative grouping of multiple scopes that enables you to support DHCP clients on a single physical network segment that hosts multiple IP subnets. If, for example, you have a large switched network that you've split into five logical subnets, you can create a separate scope for each subnet and then create a superscope with the five scopes as members. Creating the superscope enables you to manage all five of the member scopes as a single administrative entity.To create a superscope, you select a DHCP server in the DHCP console and select New Superscope from the Action menu. This launches the New Superscope wizard, in which you select the scopes that you want to group together into the superscope. The superscope appears in the scope pane hierarchy as an object beneath the server, with its member scopes subordinate to it. After you've created the superscope, you can activate all the member scopes at one time by simply activating the superscope.
Configuring DHCP OptionsCreating a scope enables a DHCP server to assign IP addresses and a subnet mask to the clients on a particular subnet, but the clients' TCP/IP configuration process will not be complete until they receive other parameters, such as a default gateway, as well. As discussed earlier, you can configure the most commonly used DHCP options when you create the scope. However, when you configure the options after creating the scope, you have access to the full range of options supported by the DHCP server.Windows 2000 DHCP Server enables you to configure DHCP options at the server level or the scope level. If all the DHCP clients on your network will be using the same default gateway, DNS servers, and so on, you can configure server options that apply to all your scopes. If you need to specify different options for the computers on different scopes, you can create scope options that apply only to the client in that scope. If you have some options that apply to all the computers on the network (such as DNS server addresses, for example) and some that are scope-specific (such as default gateway addresses), you can create both server options and scope options; the server will combine them when actually configuring a client computer. To configure the most commonly used DHCP options, use the following procedure:
Figure 5.17 The Server Options dialog box
Figure 5.18 The Server Options dialog box with the 003 Router controls displayed
Many of the various options supported by Windows 2000 DHCP Server require different types of controls to configure them. The controls that appear in the bottom half of the dialog box vary, depending on the option you select. Figure 5.19 The Server Options dialog box with the 003 Router controls activated
If you already know the IP address of the router, you can type it in the IP Address box and proceed to step 8.
Deploying DHCP Options with User ClassesIn some cases, you might want to configure certain DHCP clients with parameters that are different from those of the other clients on the same subnet. One example in which this might be the case is when you have a group of laptop computers that are frequently moved throughout your enterprise network. To adequately support these computers, you want to configure them with a short DHCP lease duration, such as four hours. However, specifying a four-hour lease duration for all the computers on your network would result in excessive amounts of DHCP traffic and server disk activity. To address this problem, you can create a separate user class for the laptops and configure DHCP options that apply only to that user class.The process of assigning option values with user classes consists of three procedures:
To create a new user class, use the following procedure:
Figure 5.20 The DHCP User Classes dialog box
Figure 5.21 The New Class dialog box
Figure 5.22 The DHCP User Classes dialog box with a newly created class
To configure options for the new user class you created, use the following procedure:
Figure 5.23 The Advanced tab in the Scope Options dialog box
Figure 5.24 User class-specific server options
To configure a DHCP client to be a member of a specific user class, use the following procedure:
Creating a ReservationManual IP address allocation is implemented in DHCP Server in the form of reservations, which you create to assign a specific IP address to a specific computer. When you create a reservation, the IP address you specify is always assigned to the same DHCP client. Although it might be just as easy to manually configure a computer with a static IP address, using DHCP reservations is recommended because they prevent the addresses you reserve from being assigned to other computers.To create a reservation, use the following procedure:
Figure 5.25 The New Reservation dialog box
To determine the hardware address of a Windows 2000 computer, type ipconfig /all at the command prompt. To view the hardware address of a remote computer on the network, open the Computer Management console, connect to the desired computer, expand the System Information heading to display the Components/Network/Adapter entry, and view the MAC Address listing in the details pane.
Figure 5.26 The DHCP console with an IP address reservation
Exercise 1: Examining DHCP TrafficIn this exercise, you use the Network Monitor application supplied with Windows 2000 Server to capture samples of DHCP messages on your network and examine their contents. This exercise assumes that you have a Windows 2000 Server computer with Network Monitor installed and connected to a LAN with a DHCP server present. You also need a second Windows 2000 computer configured to function as a DHCP client. For instructions about how to install and use Network Monitor, see Lesson 1 in Chapter 14, "Monitoring Network Activity."
Figure 5.27 The Network Monitor Capture window filtered to display only DHCP messages
Figure 5.28 A captured DHCPRELEASE message What caused the DHCPRELEASE message to be generated?
Notice that the DHCP Message Type option indicates that this is a DHCPRELEASE message. Figure 5.29 The Options field of a DHCPRELEASE packet
Figure 5.30 A captured DHCPDISCOVER message What initiated the creation of the DHCPDISCOVER message? Why do the four IP address fields (Ciaddr, Yiaddr, Siaddr, and Giaddr) all contain values of 0.0.0.0?
Notice that, in this case, the client has included the Requested Address option containing the IP address it had been using up to the time of its recent release. In this DHCP implementation, the client attempts to maintain the use of the same IP address whenever possible.
What IP address has the server offered the client? What are the functions of the options listed in the Option field? Figure 5.31 A captured DHCPOFFER message
Figure 5.32 A captured DHCPREQUEST message What is the function of the Client-Identifier option in the Option field?
Figure 5.33 A captured DHCPACK message The DHCPACK message contains all the options that were originally included in the DHCPOFFER message.
Exercise 2: Configuring ScopesAs the DHCP administrator for your organization, you are creating a scope for your 192.168.6.32/28 subnet. The router functioning as the default gateway for the subnet has been manually configured with the lowest available IP address on the subnet. There are also two Internet servers on the subnet for which you will create reservations using the three highest available IP addresses. Based on this information, answer the following questions.
Lesson Review
Lesson Summary
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||