DHCP glossary

What is a DHCP scope?

Abstract isometric UI showing network ranges, usage bars, region names (EMEA/APAC), and a purple "Deploy" button
Key takeawaysKey takeaways are generated with AI assistance. Because automated summaries can occasionally contain errors or miss important context, always refer to the full blog post for complete information.

A DHCP scope is a configuration object on a DHCP server that defines the pool of IP addresses and related settings available for lease to clients on a single subnet, including the address range, exclusions, lease duration, and options such as default gateway and DNS servers. Scopes are fundamental to DHCP administration, and their proper configuration is critical because misconfigurations—such as pool exhaustion, overlapping ranges, incorrect gateway or DNS options, or scope-subnet mismatches—can cause clients to fail obtaining addresses, experience intermittent outages, or lose network connectivity. Tying scopes to an IP address management system provides a single authoritative record of ranges, utilization, and ownership, enabling more reliable audits, capacity planning, and reducing configuration drift across enterprise networks with hundreds or thousands of subnets.

  • A scope contains reservations that tie specific addresses to client identifiers such as MAC addresses, ensuring devices like printers and servers always receive the same address rather than drawing dynamically from the available pool.
  • Pool exhaustion on busy networks such as guest Wi-Fi occurs when the address range is too small or lease times are too long, causing new devices to fail obtaining addresses and falling back to self-assigned 169.254 addresses.
  • Scope design has security implications because an unauthorized DHCP server can hand out its own gateway and DNS settings to redirect traffic, making scope configuration typically paired with switch features such as DHCP snooping.

DHCP scope at a glance

AttributeValue
CategoryDHCP server configuration object
Defined inScope behavior follows the DHCP protocol in RFC 2131 and options in RFC 2132; the term scope is implementation terminology
Protocol and portDHCP over UDP, server port 67 and client port 68
OSI layerApplication layer
Primary useControlling which addresses and settings a DHCP server hands out on a subnet
Related termsDHCP, DHCP lease, DHCP reservation, DHCP relay, IP address management, subnet

How DHCP scope works

A DHCP server uses a scope to decide which address and options to offer a client. The server matches the client's network location to a scope, then draws an address from that scope's pool.

  1. Define the scope: An administrator sets the subnet, the start and end of the address range, and the subnet mask. Addresses that must not be leased, such as routers or servers with static addresses, are listed as exclusions.
  2. Set options and lease time: The administrator adds options such as default gateway, DNS servers, and domain name, along with the lease duration. Option formats are described in RFC 2132.
  3. Match the client to the scope: When a client broadcasts a request, the server selects a scope using the interface the request arrived on or, for relayed requests, the relay agent's gateway address.
  4. Lease an address: The server picks a free address from the pool and offers it with the scope's options. Once the client accepts, the server records the lease and marks the address as in use.
  5. Renew or release: The client renews the lease before it expires. If it does not, the address returns to the pool and can be leased to another device.

Scopes can also hold reservations that tie a specific address to a client identifier, so a device always receives the same address. Terminology varies: some servers call the same construct a pool or subnet declaration. Many scopes can be grouped for failover or load sharing between servers.

Why DHCP scope matters in enterprise networks

Scopes are the unit of DHCP administration, so an enterprise with hundreds or thousands of subnets may manage a matching number of scopes. Each one must agree with the real subnet, router, and DNS settings. When scopes are tracked in spreadsheets or edited by hand on individual servers, drift is common and errors are hard to find.

The most frequent failure is scope exhaustion. If the pool is too small or the lease time too long for a busy network such as guest Wi-Fi, new devices cannot obtain an address and appear to have no connectivity. Overlapping ranges, or a dynamic range that includes an address already assigned statically, cause duplicate address conflicts that produce intermittent outages. A wrong gateway or DNS option in a scope affects every client served by it.

Scopes also have security implications. An unauthorized DHCP server can hand out its own gateway and DNS settings, redirecting traffic, so scope design is usually paired with switch features such as DHCP snooping. Tying scopes to an IP address management system provides a single record of ranges, utilization, and ownership, which makes audits and capacity planning more reliable.

DHCP scope vs DHCP reservation

A scope defines the whole pool and settings for a subnet, while a reservation ties one specific address within that scope to a single client's identifier. What is DHCP Reservation?

AttributeDHCP scopeDHCP reservation
Level of definitionSubnet-wide pool and optionsSingle client entry
Address assignmentDrawn dynamically from the available rangeFixed to a client identifier such as a MAC address
RelationshipContains reservationsBelongs to a scope
Typical useGeneral client addressingPrinters, servers, and devices needing a stable address

DHCP scope vs DHCP lease

A scope is the configuration that defines what can be offered, while a lease is the temporary assignment of one address from that scope to a client. What is DHCP Lease?

AttributeDHCP scopeDHCP lease
NatureConfiguration object on the serverTime-limited binding of address to client
QuantityOne per subnet, typicallyOne per active client address
LifetimePersists until an administrator changes itExpires unless renewed

Common DHCP scope issues

Clients on busy networks such as guest Wi-Fi fail to get an address and fall back to self-assigned 169.254 addresses. The usual causes are a range too small for the device count or long lease times that hold addresses for devices that have already left.

Static devices lose connectivity or trigger duplicate address warnings when their addresses were never excluded from the range. The scope then leases an address already in use by a router or server.

Clients get an address but cannot reach other networks or resolve names. This happens when the default gateway or DNS server option was copied from another scope or left unchanged after a subnet renumbering.

Clients receive addresses with a wrong subnet mask or no offer at all. The scope does not match the actual subnet on the router interface or relay agent, so the server selects the wrong scope or none.

After a failover or manual edit, two servers hold different scope settings, so clients receive different options depending on which server answers. Changes made on one server and not replicated cause this.

See how unified DDI simplifies network operations

Manage DNS, DHCP and IP addresses from one platform with automation, visibility and control built in.

DHCP scope FAQ

Related terms

Article

DHCP (Dynamic Host Configuration Protocol)

DHCP (Dynamic Host Configuration Protocol) is the standard mechanism to dynamically assign IP addresses within a network.

Learn more
Article

DHCP Lease

A DHCP lease is the period during which a DHCP server assigns an IP address to a client device, allowing it to use that address before renewal or expiration.

Learn more
Article

DHCP Reservation

A DHCP reservation ensures that a specific device receives the same IP address whenever it requests an address from a DHCP server.

Learn more
Article

DHCP Relay Agent

A DHCP relay agent forwards DHCP messages between clients and servers on different network subnets, enabling centralized DHCP services.

Learn more
Article

IP Address Exhaustion

IP address exhaustion occurs when a network runs out of available IP addresses to assign to devices, limiting its ability to accommodate new connections.

Learn more
Article

Subnet mask

A subnet mask is a 32-bit number that divides an IP address into network address and host address portions.

Learn more
Article

Default Gateway

A default gateway is the network device, typically a router, that forwards traffic from a local network to destinations outside its subnet.

Learn more
Article

DORA process

The DORA process is the four-step sequence of Discover, Offer, Request, and Acknowledge messages exchanged between DHCP client and server to assign an IP address.

Learn more