Adding Windows DHCP
How to add DHCP information to your Micetro free trial
Read moreDHCPACK is the Dynamic Host Configuration Protocol acknowledgment message that a DHCP server sends to confirm an address lease and deliver final configuration parameters to a client, as defined in RFC 2131. It represents the final message in the standard four-message DHCP exchange and is the moment when a lease becomes valid, allowing a device to gain working network access. When DHCPACK messages are slow or missing due to causes such as exhausted address pools, misconfigured relay agents, server failures, or firewall blocking, clients experience network outages and may fall back to link-local addressing, making accurate logging and monitoring of DHCPACK activity essential for network operators to detect pool exhaustion and troubleshoot connectivity issues.
DHCPACK is the last message in the standard four-message DHCP exchange for a new lease. It is also used when a client renews a lease or asks only for configuration parameters.
Before using the address, a client may probe the network, for example with ARP, to check that no other host holds it. If the address is already in use, RFC 2131 has the client send a DHCPDECLINE and start over. If the server cannot honor a request, it sends a DHCPNAK instead of a DHCPACK. A DHCPACK also answers a DHCPINFORM, in which case it carries options but no address.
Clients on a remote subnet send requests but never receive a DHCPACK because the relay agent has a wrong or missing giaddr, or return traffic is blocked. Server logs show an acknowledgment sent while the client logs show repeated requests.
After a power event or a Wi-Fi roam storm, many clients request at once and an overloaded server or slow backend database delays the DHCPACK. Clients time out, retry, and may fall back to link-local addresses.
An unauthorized DHCP server, often a consumer router plugged into a switch, sends its own DHCPACK with a wrong gateway or DNS server. Users get addresses that work locally but cannot reach other networks.
A client probes the address after the DHCPACK, finds it already in use, and declines the lease. This is usually caused by a static device inside the dynamic range, and it shows up as repeated declines in server logs.
Security policy or DHCP snooping on an untrusted port discards the server's DHCPACK, so the server records a lease that the client never learns about. Check that the server-facing port is trusted and that UDP ports 67 and 68 are permitted.