Question

Difficulty: HardDHCP Architecture and Relay Services

An enterprise network has deployed a centralized DHCP server on VLAN 100 (10.100.0.10/2410.100.0.10/24). Client workstations on VLAN 15 (172.16.15.0/24172.16.15.0/24) and VLAN 25 (172.16.25.0/24172.16.25.0/24) connect to a Layer 3 switch serving as their default gateway but fail to receive dynamic IP leases, resulting in APIPA address assignments. Which of the following configuration steps and operational mechanics must be implemented on the Layer 3 switch to resolve this issue? (Select TWO.)

  1. Configure the `ip helper-address 10.100.0.10` command directly under the Switched Virtual Interfaces (SVIs) for VLAN 15 and VLAN 25.Answer
  2. The switch converts incoming client DHCP broadcasts into unicast UDP packets destined for port 67 of the central server address.Answer
  3. C
    Configure the `ip helper-address 10.100.0.10` command once in global configuration mode to apply across all defined switch subnets.
  4. D
    Configure inter-VLAN Access Control Lists (ACLs) to permit TCP destination port 67 traffic from the client SVIs to the DHCP server.

Answer

The Layer 3 switch must be configured with `ip helper-address 10.100.0.10` on the SVIs for VLAN 15 and VLAN 25, and the switch operates by relaying broadcast DHCP client packets as unicast UDP destination port 67 traffic to the central server.
DHCP clients broadcast initial DHCPDISCOVER packets within their local VLAN. Because Layer 3 devices drop broadcasts, a DHCP Relay Agent (`ip helper-address`) must be configured on each client-facing Layer 3 interface (SVI). Upon receiving the broadcast, the relay agent converts the request into a unicast UDP packet (using UDP port 67 for both source and destination or forwarding to UDP 67) and sends it directly to the unicast IP address of the remote DHCP server.

Step-by-Step Solution

1
Identify the boundary requiring DHCP Relay Agent functionality.
Client broadcast packets for DHCP Discovery (UDP port 67) cannot cross Layer 3 VLAN boundaries natively.
Routers and Layer 3 switches drop broadcast traffic by default.
2
Determine interface-level configuration requirements.
Apply `ip helper-address` to the client-facing interface SVIs (VLAN 15 and VLAN 25).
The relay agent requires interface context to populate the `giaddr` header field with the interface's IP address, allowing the central server to select the correct IP address pool.
3
Verify protocol and transport-layer characteristics of relayed traffic.
Broadcast UDP packets received on port 67 are unicast to the target server on UDP port 67.
DHCP relay services convert local Layer 2/3 broadcasts into routable Layer 3 unicast UDP packets.

Key Concept

DHCP Relay Agent Architecture and UDP Forwarding Mechanics
Estimated Time:2m 0s
Rate this question