Adding Windows DHCP
How to add DHCP information to your Micetro free trial
Read moreDHCPREQUEST is a Dynamic Host Configuration Protocol message sent by clients to request specific configuration parameters, most commonly an IP address lease, operating as the critical third step in the DORA exchange where a lease becomes binding only after the server replies with DHCPACK. The message serves multiple operational roles including selecting from multiple server offers, confirming addresses after reboot, and renewing expiring leases, with its handling directly impacting server load, network troubleshooting, and security posture. On large networks with thousands of clients, the volume and timing of DHCPREQUEST messages shape server performance, while protocol vulnerabilities and common failure modes such as relay agent problems, stale caches, and rogue servers require careful packet analysis and monitoring to diagnose and prevent address conflicts, exhaustion attacks, and service disruption.
A client sends DHCPREQUEST in several situations, and the contents of the message differ in each. The best known case is the third step of the initial DORA exchange, as described in RFC 2131.
A client that reboots and remembers a prior lease may also send DHCPREQUEST without a DHCPDISCOVER, to confirm that the address is still valid on the current network. In that case no server identifier is included, so any server that knows the binding can answer.
A client that moved to another VLAN or subnet often still requests its old address and gets a DHCPNAK each time. It normally recovers by restarting discovery, but a client that keeps retrying points to a stale cache or a wrong scope on the server.
Broadcast DHCPREQUEST messages never reach the server if the relay agent is missing or its helper address is wrong. Clients then time out, and packet captures show requests on the client VLAN with no reply.
A rogue or misconfigured second server can send DHCPNAK or conflicting offers in response to requests. Clients lose valid leases or get wrong gateways and DNS settings, and the server identifier in captured requests shows which server was chosen.
Very short lease times or many clients rebooting together produce bursts of DHCPREQUEST messages that slow server responses. Lengthening leases or staggering restarts reduces the peak.
In a failover pair, a partner that lacks current lease data may answer a renewal with DHCPNAK, or ignore it. Clients drop their address, so check the failover state and lease synchronization first.