Question

Difficulty: HardTroubleshooting IP Addressing and DHCP Services

A network administrator is troubleshooting an issue where hosts on a newly provisioned user subnet (VLAN 50, 10.50.10.0/2410.50.10.0/24) are receiving APIPA IPv4 addresses (169.254.x.x169.254.x.x) instead of valid leases from the central DHCP server located on VLAN 10 (10.10.10.210.10.10.2). Place the diagnostic and remediation steps in the correct logical sequence from initial verification to final resolution confirmation.

  1. 1Run `ipconfig /all` on a client workstation on VLAN 50 to verify that DHCP is enabled and that no static IP conflict exists.
  2. 2Inspect the VLAN 50 layer 3 gateway interface configuration on the switch/router to verify the presence of an `ip helper-address 10.10.10.2` statement.
  3. 3Apply `ip helper-address 10.10.10.2` to the VLAN 50 interface and verify firewall access control lists (ACLs) permit UDP ports 67 and 68 between subnets.
  4. 4Execute `ipconfig /renew` on the client workstation and run `ipconfig /all` to confirm a valid 10.50.10.x10.50.10.x lease, default gateway, and DNS settings.

Answer

The correct logical order begins with host configuration verification (`ipconfig /all`), followed by checking the gateway's DHCP relay (`ip helper-address`) configuration, applying the missing relay/ACL configuration, and concluding with host lease renewal (`ipconfig /renew`) to verify full functionality.
Following standard network troubleshooting methodology, an engineer first identifies the problem at the client host by checking `ipconfig /all`. Because the host has an APIPA address (169.254.x.x169.254.x.x) and resides on a separate subnet from the DHCP server, the engineer must next inspect the gateway router for a missing `ip helper-address`. Once identified, configuring the helper address and verifying UDP 67/68 traffic flow remediates the relay failure. Finally, forcing a lease renewal with `ipconfig /renew` on the client confirms full operational recovery.

Step-by-Step Solution

1
Verify client network state
Confirmed client is configured for DHCP but assigned an APIPA address (169.254.x.x169.254.x.x).
Establishes the problem scope at the host before investigating network infrastructure.
2
Check Layer 3 gateway relay configuration
Identified that `ip helper-address` is missing on the SVI/interface for VLAN 50.
DHCP broadcasts cannot cross Layer 3 boundaries without a configured relay agent.
3
Implement solution and check ACLs
`ip helper-address 10.10.10.2` is configured and UDP ports 67/68 are allowed across the router.
Remediates the root cause by converting client broadcast requests into unicast packets routed to the DHCP server.
4
Verify complete resolution
Client successfully obtains a lease within 10.50.10.0/2410.50.10.0/24.
Confirms system functionality as required by standard troubleshooting methodology.

Key Concept

DHCP Relay and Helper Address Troubleshooting across Layer 3 Subnets
Rate this question