These days, connecting devices to an existing TCP/IP network is really quite easy: you used to have to manually (and tediously) assign IP addresses by hand and then enter them into the various systems. This address management now takes place automatically. The Dynamic Host Configuration Protocol (DHCP) makes it possible for communication hardware (such as routers, hubs, or switches) to automatically assign an individual address to connection-seeking devices and integrate them into a network.
$1 Domain Names
Register great TLDs for less than $1 for the first year.
Why wait? Grab your favorite domain name today!
Matching emailSSL certificate24/7/365 supportThe Dynamic Host Configuration Protocol is an extension of the Bootstrap Protocol (BOOTP) developed in 1985 that connects simple devices like terminals and workstations that don’t have a hard drive with a boot server. These devices then access your operating system over the server. DHCP was developed as a solution for larger networks and portable computers. It complements BOOTP and others with the ability to automatically assign reusable network addresses as well as additional configuration options. After the first definitions of the protocol in the RFCs 1531 and 1541 (both 1993), the final standard specification was made official in 1997 in the RFC 2131. The Internet Assigned Numbers Authority (IANA) assigned UDP ports 67 and 68 (for IPv6: ports 546 and 547) to the communication protocol, which are also assigned for the Bootstrap Protocol.
Address assignment with DHCP operates according to the Client/Server principle: the connection-seeking device requests an IP address configuration from a DHCP server, which in turn accesses a database from which the network parameters that need to be set are acquired. Among other things, this server, which is part of any modern DSL router, can assign the following settings to the client using its database information:
Automatic address assignment via the Dynamic Host Configuration Protocol proceeds in four consecutive steps:
The automatically given address is saved in combination with the MAC address in the server’s database, at which time the configuration is made permanent. The device always connects to the network with the assigned IP address, which is blocked for other clients. But this has the disadvantage that new DHCP clients don’t receive an address if the entire address range has already been assigned — even if some of the IPs aren’t actively used anymore. Essentially, this is why dynamic IPs and some in cases, manual assignment via DHCP server, both of which will be discussed in the next section, are more widespread.
The problem of encountering a completely occupied address range is rather unlikely when using dynamic address assignment. In principle, this method largely resembles automatic assignment, but there is a small, subtle difference: The IP configurations transmitted by the DHCP server aren’t valid indefinitely, they come instead with an administrator-defined lease. This specifies how long the device can access the network with the respective IP address. Before this time window expires, standard clients have to request an extension by sending another DHCPREQUEST package. If this doesn’t happen, then there is no so-called DHCP refresh and the server makes the address in question available again.
While administrators don’t have much to do with either the automatic or the dynamic assignment options, the situation is completely different with manual addressing. With this method, which is also referred to as static DHCP, the available IP addresses are assigned manually to specific MAC addresses by means of the DHCP server. There is no restriction on the validity period.
Because of the increased effort in the administration, which defeats the purpose of the Dynamic Host Configuration Protocol, this type of assignment only makes sense for very small application scenarios. For example, static IPs are necessary if server services are hosted on the computer in question and computer is also available to other network users at any time. It’s important for port forwarding that the IP address remains unchanged as well.
In order for the IP addresses assigned by the clients to be given their fully qualified names in the domain, a DNS server needs to provide name resolution. If a previously entered address or host name is changed, the name server needs an update. With the constantly changing IP addresses that come from dynamic assignment via a DHCP server. Manual implementation would be very time-consuming for the administrator of the network, as well as for the user who wants to connect to the internet with their devices at home. But thanks to DHCP servers, neither has to deal with the updates necessary for dynamic allocation, since the servers take care of the information exchange and update the DNS server as soon as a new IP address has been assigned.
One weakness of the Dynamic Host Configuration Protocol is that it’s fairly easy to manipulate: Since the client contacts all potential DHCP servers, it is possible, for example, for attackers to bring their own provider into play if you have access to that network. One such “rogue” DHCP server tries to be faster than the actual server with its response to the connection request of the client. If successful, it can then transmit manipulated or unusable parameters. To do this, it can start a denial-of-service attack on the network, for example, by not transmitting a gateway, assigning a subnet to each client, or responding to all requests with the same IP address.
A more dramatic scenario would be the attempt to use a false gateway and false DNS information to inject a foreign router that cuts off or even redirects the data traffic of the client. One such man-in-the-middle attack aims — as opposed to the first type of attack — not to crash the network, but to access sensitive data like bank data, passwords, or address information.
Regardless of the type of attack, strangers need direct access to your network to abuse the DHCP protocol for their purposes. If you take the necessary safety precautions, you can take advantage of the benefits of the communication protocol with having to fear such attacks. To be responsible for a larger local network, the complete protection from external and internal attack attempts as well as the constant monitoring of all network process with tools like Nagios should already be part of your routine. In IONOS’s guide on the topic of Wi-Fi security, you can read more about which possibilities there are for protecting your wireless networks.
If you want to join a local or wireless network with your device, you usually access the Dynamic Host Configuration Protocol automatically without having to make any changes to the network settings. Computers with Microsoft Windows operating systems, for example, have long been pre-set to act as DHCP clients who automatically obtain their IP addresses. By default, this uses the dynamic assignment style, in which the configurations have to be extended regularly or are assigned again after expiring. In local networks, using the corresponding DHCP server settings, the automatic assignment of fixed address information can also be used.
If you would like to test the current settings of the address assignment or disable DHCP and switch to a manual option, you can do so with the steps described below — the one condition is that you have to have administrator rights.
Manually organizing a large local network can be a nerve-wracking and very complicated matter. Without your own DHCP and DNS servers to support you in the distribution of addresses and name resolution, all IPs would have to be entered manually and also updated independently if changes are made in the network. Zeroconf implementations like Bonjour, which connect network components without almost no...
Remote desktop connections are indispensable for day-to-day business. More than anything, allowing remote control access from another computer saves time: Whether for support, online conferences, or home office — with remote desktop, you can easily and conveniently connect your computer to distant devices. Private users also benefit from remote use: By connecting with different operating systems,...
If you want to connect a computer, smartphone, etc. to a network (LAN or WiFi), you can either assign the IP address manually or get it automatically. The latter is possible thanks to the DHCP (dynamic host configuration protocol) communication protocol, which has established itself as the cross-platform standard solution for address management. The forerunner was the BOOTP bootstrap protocol that...
Out-dated technology can still be interesting. Even though the Reverse Address Resolution Protocol was introduced in 1984, and considered obsolete the following year due to the Bootstrap Protocol, it continued to be used long after. The RARP has not completely disappeared from network technology even today. As the Reverse ARP, this protocol is a counterpart to the Address Resolution Protocol. But...
DHCP snooping makes a network more secure. There are no two ways about it: DHCP makes network configuration so much easier. This is especially the case in large networks, where devices are constantly changing and the manual assignment of IP addresses is a never-ending task. Yet by using DHCP to simplify the process, you do relinquish controls, and criminals can take advantage of this. By using...
Provide powerful and reliable service to your clients with a web hosting package from IONOS.
View packages
