Soru

Zorluk: ZorDHCP Architecture and Relay Services

An enterprise campus utilizes a Layer 3 core switch handling routing for multiple virtual LANs. Host devices on VLAN 50 (10.50.0.0/2410.50.0.0/24) fail to acquire dynamic IP address assignments upon boot, resulting in self-assigned APIPA addresses (169.254.x.x169.254.x.x). Packet analysis on the core switch reveals that incoming broadcast DHCPDISCOVERDHCPDISCOVER messages arrive at the VLAN 50 interface, but the switch fails to encapsulate and forward these requests as unicast traffic to the remote DHCP server located at 172.16.100.25172.16.100.25. Which configuration issue on the core switch is preventing clients on VLAN 50 from receiving DHCP leases?

  1. The ip helper-address statement is omitted from the Switch Virtual Interface (SVI) for VLAN 50.Cevap
  2. B
    The ip helper-address statement was configured on the physical uplink port connecting to the DHCP server rather than the client gateway SVI.
  3. C
    The core switch is improperly attempting to establish a TCP three-way handshake with the DHCP server prior to relaying lease requests.
  4. D
    The relay agent is forwarding client discovery packets using target UDP port 68 instead of target UDP port 67.

Cevap

The ip helper-address statement is omitted from the Switch Virtual Interface (SVI) for VLAN 50.
For a Layer 3 switch or router to act as a DHCP relay agent, the relay directive (such as `ip helper-address`) must be applied to the specific Layer 3 ingress interface (SVI or physical interface) that receives the client's broadcast traffic. When clients on VLAN 50 broadcast a DHCPDISCOVER message, the core switch checks SVI 50 for a helper address. If missing, the broadcast is discarded at the Layer 3 boundary. When properly configured on SVI 50, the switch converts the broadcast into a unicast UDP packet (destined for port 67 on the DHCP server) and populates the `giaddr` field with SVI 50's IP address.

Adım Adım Çözüm

1
Analyze client frame traffic characteristics
Clients on VLAN 50 broadcast DHCPDISCOVER frames to destination 255.255.255.255, bounded by the Layer 2 broadcast domain.
Routers and Layer 3 switches drop broadcast packets by default unless explicitly configured to intercept and relay them.
2
Identify the ingress interface for DHCP relay placement
The core switch must intercept broadcasts at the gateway interface serving the client broadcast domain (VLAN 50 SVI).
The relay agent records the interface IP address in the giaddr (gateway IP address) field of the DHCP packet header to inform the DHCP server which address scope to allocate from.
3
Verify missing interface directive
Without the `ip helper-address 172.16.100.25` directive on SVI 50, the switch silently discards client DHCP broadcasts.
The missing command directly explains why no outbound unicast packets were generated toward the DHCP server.

Anahtar Kavram

DHCP Relay Agent Placement and Gateway SVI Configuration
Bu soruyu puanla