Security audit logs indicate that endpoints located in a newly provisioned research laboratory segment (subnet ) are failing to receive dynamic IP address assignments. The organization maintains a centralized redundant DHCP server cluster at . While unicast routing between the subnets is verified to be functioning properly, client broadcast DHCPDISCOVER messages originating from the laboratory segment are stopped at the local router interface. Which configuration change on the gateway router will allow the research segment endpoints to obtain dynamic IP leases from the central cluster?
- Adding the IP helper address pointing to 10.45.10.50 on the router interface serving subnet 10.45.80.0/24Answer
- BAdding the IP helper address pointing to 10.45.80.1 on the router interface directly connected to the DHCP server
- CCreating an authoritative CNAME record on the DNS server mapping the subnet broadcast address to 10.45.10.50
- DReconfiguring the client endpoints to transmit DHCP discovery requests over TCP port 68 instead of UDP port 67
Answer
Configure the IP helper address pointing to 10.45.10.50 on the incoming router interface for subnet 10.45.80.0/24.
Routers do not forward Layer 2 or Layer 3 broadcast messages across subnet boundaries by default. When endpoints emit DHCPDISCOVER broadcasts on subnet 10.45.80.0/24, the router interface serving as their default gateway drops the broadcast. Configuring an IP helper address on that specific incoming interface enables the router to act as a DHCP Relay Agent, converting the broadcast into a unicast frame addressed directly to the central DHCP server at 10.45.10.50.
Step-by-Step Solution
Key Concept
DHCP Relay / IP Helper Agent Configuration
Estimated Time:1m 15s