Question

Difficulty: EasyTroubleshooting IP Addressing and DHCP Services

A client workstation on VLAN 10 (10.10.10.0/2410.10.10.0/24) fails to receive an IPv4 address lease from a centralized DHCP server located on VLAN 20 (10.10.20.510.10.20.5). Which TWO of the following configurations or conditions on the intervening Layer 3 router would directly prevent the client from obtaining a DHCP lease? (Select TWO.)

  1. The router interface attached to VLAN 10 lacks an IP helper address (DHCP relay agent) configured to forward broadcast request packets to 10.10.20.510.10.20.5.Answer
  2. An inbound Access Control List (ACL) applied to the VLAN 10 router interface is blocking UDP traffic targeted at destination ports 67 and 68.Answer
  3. C
    The DHCP server's scope for VLAN 10 has auto-assigned an APIPA address of 169.254.1.50169.254.1.50 to the client due to default gateway unreachable errors.
  4. D
    The router's default gateway address for VLAN 20 resides on a different subnet than the DHCP server's IP address.

Answer

The client fails to obtain an IP lease because the router interface on VLAN 10 is missing a DHCP relay (IP helper address) to forward broadcast traffic across subnets, and/or an Access Control List on the router is blocking UDP ports 67 and 68 used by DHCP.
DHCP Discover packets are sent as broadcasts (255.255.255.255255.255.255.255). Routers do not forward broadcasts between subnets unless a DHCP relay agent (IP helper address) is explicitly configured on the receiving interface. Additionally, DHCP relies on UDP ports 67 and 68, so blocking these ports with an ACL on the router interface prevents relay processing.

Step-by-Step Solution

1
Analyze how DHCP broadcast packets behave at Layer 3 boundaries.
DHCP Discover messages are sent as Layer 2/3 broadcasts, which routers drop by default.
To cross subnets to reach a server on VLAN 20, the router interface on VLAN 10 must have a relay agent (IP helper address) enabled.
2
Identify required transport protocol ports for DHCP communications.
DHCP traffic uses UDP port 67 for the server and UDP port 68 for the client.
If an ACL on the router blocks these ports, DHCP messages cannot be relayed or processed.

Key Concept

DHCP Relay and Port Requirements for Cross-Subnet IP Addressing Services
Rate this question