---
title: DHCP Addressing
tags: Cisco IOS, networking, manual, reference, router, switch, technical
---
<header>
<h6><abbr title="Dynamic Host Configuration Protocol">DHCP</abbr> Addressing</h6>
> [toc]
</header>
---
# DHCPv4
## Config
**Exclude IPv4 Addresses**
```pug
Router(config)# ip dhcp excluded-address <low-address> [<high-address>]
```
**Define a DHCPv4 Pool Name**
```pug
Router(config)# ip dhcp pool <pool-name>
Router(dhcp-config)#
```
**Configure the DHCPv4 Pool**
```pug
R1(dhcp-config)# network 192.168.10.0 255.255.255.0
R1(dhcp-config)# default-router 192.168.10.1
R1(dhcp-config)# dns-server 192.168.11.5
R1(dhcp-config)# domain-name example.com
R1(dhcp-config)# end
R1#
R1# show running-config | section dhcp
! Displays the DHCPv4 commands configured on the router.
R1#
R1# show ip dhcp binding
! Displays a list of all IPv4 address to MAC address bindings provided by the DHCPv4 service.
R1#
R1# show ip dhcp server statistics
! Displays count information regarding the number of DHCPv4 messages that have been sent and received.
R1#
```
### Example
```pug
R1(config)# ip dhcp excluded-address 192.168.10.1 192.168.10.9
R1(config)# ip dhcp excluded-address 192.168.10.254
R1(config)# ip dhcp pool LAN-POOL-1
R1(dhcp-config)# network 192.168.10.0 255.255.255.0
R1(dhcp-config)# default-router 192.168.10.1
R1(dhcp-config)# dns-server 192.168.11.5
R1(dhcp-config)# domain-name example.com
R1(dhcp-config)# end
R1#
R1# show running-config | section dhcp
! ip dhcp excluded-address 192.168.10.1 192.168.10.9
! ip dhcp excluded-address 192.168.10.254
! ip dhcp pool LAN-POOL-1
! network 192.168.10.0 255.255.255.0
! default-router 192.168.10.1
! dns-server 192.168.11.5
! domain-name example.com
R1#
R1# show ip dhcp binding
! Bindings from all pools not associated with VRF:
! IP address Client-ID/ Lease expiration ! Type State Interface
! Hardware address/
! User name
! 192.168.10.10 0100.5056.b3ed.d8 Sep 15 2019 8:42 AM ! Automatic Active GigabitEthernet0/0/0
R1#
R1# show ip dhcp server statistics
! Memory usage 19465
! Address pools 1
! Database agents 0
! Automatic bindings 2
! Manual bindings 0
! Expired bindings 0
! ...output truncated...
! Message Received
! BOOTREQUEST 0
! DHCPDISCOVER 4
! DHCPREQUEST 2
! DHCPDECLINE 0
! DHCPRELEASE 0
! DHCPINFORM 0
```
## DHCPv4 Relay
**Configure a Router to relay DHCPv4 broadcasts to an external DHCPv4 server**
```pug
R1(config)# interface g0/0/0
R1(config-if)# ip helper-address 192.168.11.6
R1(config-if)# end
R1#
```
**By default, the `ip helper-address` command forwards the following eight UDP services**
* Port 37: Time
* Port 49: TACACS
* Port 53: DNS
* Port 67: DHCP/BOOTP server
* Port 68: DHCP/BOOTP client
* Port 69: TFTP
* Port 137: NetBIOS name service
* Port 138: NetBIOS datagram service
## DHCPv4 Client
**Configure a Cisco IOS router as a DHCPv4 client** - [connect the Ethernet interface to a cable or DSL modem]
```pug
R1(config)# interface G0/0/1
R1(config-if)# ip address dhcp
R1(config-if)# no shutdown
! Sep 12 10:01:25.773: %DHCP-6-ADDRESS_ASSIGN: Interface GigabitEthernet0/0/1 assigned DHCP address 209.165.201.12, mask 255.255.255.224, hostname R1
R1(config-if)# end
R1#
R1# show ip interface g0/0/1
! GigabitEthernet0/0/1 is up, line protocol is up
! Internet address is 209.165.201.12/27
! Broadcast address is 255.255.255.255
! Address determined by DHCP
```
---
# DHCPv6 Configuration
## DHCPv6 Router Advertisement
### Stateless Address Auto-configuration (SLAAC) Advertisement
To enable the sending of RA messages, a router must join the IPv6 all-routers group using the ipv6 unicast-routing global config command, as show in the output.
```pug
R1(config)# ipv6 unicast-routing
R1(config)# exit
R1#
```
### Stateless DHCPv6 Advertisement
Stateless DHCPv6 is enabled on a router interface using the **`ipv6 nd other-config-flag`** interface configuration command. This sets the **O** flag to `1`.
:::success
Use the command **`no ipv6 nd other-config-flag`** to reset the interface to the default SLAAC only option (i.e. set the **O** flag to `0`).
:::
```pug
R1(config-if)# ipv6 nd other-config-flag
R1(config-if)# end
R1#
R1# show ipv6 interface g0/0/1 | begin ND
! ND DAD is enabled, number of DAD attempts: 1
! ND reachable time is 30000 milliseconds (using 30000)
! ND advertised reachable time is 0 (unspecified)
! ND advertised retransmit interval is 0 (unspecified)
! ND router advertisements are sent every 200 seconds
! ND router advertisements live for 1800 seconds
! ND advertised default router preference is Medium
! Hosts use stateless autoconfig for addresses.
! Hosts use DHCP to obtain other configuration.
R1#
```
### Stateful DHCPv6 Advertisement
Stateful DHCPv6 is enabled on a router interface using the **`ipv6 nd managed-config-flag`** interface configuration command. This sets the **M** flag to `1`. The **`ipv6 nd prefix default no-autoconfig`** interface command disables SLAAC by setting the **A** flag to `0`.
```pug
R1(config)# int g0/0/1
R1(config-if)# ipv6 nd managed-config-flag
R1(config-if)# ipv6 nd prefix default no-autoconfig
R1(config-if)# end
R1#
R1# show ipv6 interface g0/0/1 | begin ND
! ND DAD is enabled, number of DAD attempts: 1
! ND reachable time is 30000 milliseconds (using 30000)
! ND advertised reachable time is 0 (unspecified)
! ND advertised retransmit interval is 0 (unspecified)
! ND router advertisements are sent every 200 seconds
! ND router advertisements live for 1800 seconds
! ND advertised default router preference is Medium
! Hosts use DHCP to obtain routable addresses.
R1#
```
## DHCPv6 Router Roles
### Stateless DHCPv6 Configuration (Router-As-Server)
The stateless DHCPv6 server option requires that the router advertise the IPv6 network addressing information in RA messages. However, the client must contact a DHCPv6 server for more information.
<ol class="step-list">
<li><b>Enable IPv6 routing.</b></li>
```pug
R1(config)# ipv6 unicast-routing
R1(config)#
```
<li><b>Define a DHCPv6 pool name.</b></li>
```pug
R1(config)# ipv6 dhcp pool IPV6-STATELESS
R1(config-dhcpv6)#
```
:::info
Pool names do not have to be uppercase. However, using an uppercase name makes it easier to see in a configuration.
:::
<li><b>Configure the DHCPv6 pool.</b></li>
```pug
R1(config-dhcpv6)# dns-server 2001:db8:acad:1::254
R1(config-dhcpv6)# domain-name example.com
R1(config-dhcpv6)# exit
R1(config)#
```
<li><b>Bind the DHCPv6 pool to an interface.</b></li>
The DHCPv6 pool has to be bound to the interface using the **`ipv6 dhcp server POOL-NAME`** interface config command as shown in the output.
```pug
R1(config)# interface GigabitEthernet0/0/1
R1(config-if)# description Link to LAN
R1(config-if)# ipv6 address fe80::1 link-local
R1(config-if)# ipv6 address 2001:db8:acad:1::1/64
R1(config-if)# ipv6 nd other-config-flag
R1(config-if)# ipv6 dhcp server IPV6-STATELESS
R1(config-if)# no shut
R1(config-if)# end
R1#
```
:::warning
The **O** flag must be manually changed from 0 to 1 using the interface command **`ipv6 nd other-config-flag`**. The A flag is 1 by default, telling clients to use SLAAC to create their own GUA.
:::
</ol>
### Stateless DHCPv6 Configuration (Router-As-Client)
A router can also be a DHCPv6 client and get an IPv6 configuration from a DHCPv6 server, such as a router functioning as a DHCPv6 server.
<ol class="step-list">
<li><b>Enable IPv6 routing.</b></li>
```pug
R1(config)# ipv6 unicast-routing
R1(config)#
```
<li><b>Configure client router to create an LLA.</b></li>
```pug
R3(config)# interface g0/0/1
R3(config-if)# ipv6 enable
R3(config-if)#
```
<li><b>Configure client router to use SLAAC.</b></li>
```pug
R3(config-if)# ipv6 address autoconfig
R3(config-if)# end
R3#
```
<li><b>Verify client router is assigned a GUA.</b></li>
```pug
R3# show ipv6 interface brief
! GigabitEthernet0/0/0 [up/up]
! unassigned
! GigabitEthernet0/0/1 [up/up]
! FE80::2FC:BAFF:FE94:29B1
! 2001:DB8:ACAD:1:2FC:BAFF:FE94:29B1
! Serial0/1/0 [up/up]
! unassigned
! Serial0/1/1 [up/up]
! unassigned
R3#
```
:::info
It may take the interface a few seconds to complete the process.
:::
<li><b>Verify client router received other DHCPv6 information.</b></li>
```pug
R3# show ipv6 dhcp interface g0/0/1
! GigabitEthernet0/0/1 is in client mode
! Prefix State is IDLE (0)
! Information refresh timer expires in 23:56:06
! Address State is IDLE
! List of known servers:
! Reachable via address: FE80::1
! DUID: 000300017079B3923640
! Preference: 0
! Configuration parameters:
! DNS server: 2001:DB8:ACAD:1::254
! Domain name: example.com
! Information refresh time: 0
! Prefix Rapid-Commit: disabled
! Address Rapid-Commit: disabled
R3#
```
</ol>
### Stateful DHCPv6 Configuration (Router-As-Server)
The stateful DHCP server option requires that the IPv6 enabled router tells the host to contact a DHCPv6 server to obtain all necessary IPv6 network addressing information.
<ol class="step-list">
<li><b>Enable IPv6 routing and configure the DHCPv6 pool.</b></li>
```pug
R1(config)# ipv6 unicast-routing
R1(config)# ipv6 dhcp pool IPV6-STATEFUL
R1(config-dhcpv6)# address prefix 2001:db8:acad:1::/64
R1(config-dhcpv6)# dns-server 2001:4860:4860::8888
R1(config-dhcpv6)# domain-name example.com
R1(config-dhcpv6)# exit
R1(config)#
```
<li><b>Bind the DHCPv6 pool to an interface.</b></li>
* The **M** flag must be manually changed from `0` to `1` using the **`interface command ipv6 nd managed-config-flag`**.
* The **A** flag is manually changed from `1` to `0` using the interface command **`ipv6 nd prefix default no-autoconfig`**. Setting the **A** flag to `0` tells the client not to use SLAAC to create a GUA.
* The **`ipv6 dhcp server`** command binds the DHCPv6 pool to the interface.
```pug
R1(config)# interface GigabitEthernet0/0/1
R1(config-if)# description Link to LAN
R1(config-if)# ipv6 address fe80::1 link-local
R1(config-if)# ipv6 address 2001:db8:acad:1::1/64
R1(config-if)# ipv6 nd managed-config-flag
R1(config-if)# ipv6 nd prefix default no-autoconfig
R1(config-if)# ipv6 dhcp server IPV6-STATEFUL
R1(config-if)# no shut
R1(config-if)# end
R1#
```
:::info
You can use the **`no ipv6 nd managed-config-flag`** command to set the **M** flag back to its default of `0`.
Similarly, **`no ipv6 nd prefix default no-autoconfig`** command sets the **A** flag back to its default of `1`.
:::
</ol>
### Stateful DHCPv6 Configuration (Router-As-Client)
The client router needs to have ipv6 unicast-routing enabled and an IPv6 link-local address to send and receive IPv6 messages.
```pug
R3(config)# ipv6 unicast-routing
R3(config)# interface g0/0/1
R3(config-if)# ipv6 enable
R3(config-if)# ipv6 address dhcp
R3(config-if)# end
R3#
R3# show ipv6 interface brief
! GigabitEthernet0/0/0 [up/up]
! unassigned
! GigabitEthernet0/0/1 [up/up]
! FE80::2FC:BAFF:FE94:29B1
! 2001:DB8:ACAD:1:B4CB:25FA:3C9:747C
! Serial0/1/0 [up/up]
! unassigned
! Serial0/1/1 [up/up]
! unassigned
R3#
```
### DHCPv6 Relay Agent Configuration
If the DHCPv6 server is located on a different network than the client, then the IPv6 router can be configured as a DHCPv6 relay agent. The configuration of a DHCPv6 relay agent is similar to the configuration of an IPv4 router as a DHCPv4 relay.
```pug
R1(config)# interface gigabitethernet 0/0/1
R1(config-if)# ipv6 dhcp relay destination 2001:db8:acad:1::2 G0/0/0
R1(config-if)# exit
R1(config)#
```
:::info
This command is configured on the interface facing the DHCPv6 clients and specifies the DHCPv6 server address and egress interface to reach the server, as shown above. The egress interface is only required when the next-hop address is an LLA.
:::
### DHCPv6 Relay Agent Verification Commands
The DHCPv6 relay agent can be verified using the **`show ipv6 dhcp interface`** command. This will verify that the appropriate interface is in relay mode.
```pug
R1# show ipv6 dhcp interface
! GigabitEthernet0/0/1 is in relay mode
! Relay destinations:
! 2001:DB8:ACAD:1::2
! 2001:DB8:ACAD:1::2 via GigabitEthernet0/0/0
R1#
```
On the DHCPv6 server, use the **`show ipv6 dhcp binding`** command to verify if any hosts have been assigned an IPv6 configuration.
```pug
R3# show ipv6 dhcp binding
! Client: FE80::5C43:EE7C:2959:DA68
! DUID: 0001000124F5CEA2005056B3636D
! Username : unassigned
! VRF : default
! IA NA: IA ID 0x03000C29, T1 43200, T2 69120
! Address: 2001:DB8:ACAD:2:9C3C:64DE:AADA:7857
! preferred lifetime 86400, valid lifetime 172800
! expires at Sep 29 2019 08:26 PM (172710 seconds)
R3#
```
### DHCPv6 Server Verification Commands
The **`show ipv6 dhcp pool`** command verifies the name of the DHCPv6 pool and its parameters. The command also identifies the number of active clients.
```pug
R1# show ipv6 dhcp pool
! DHCPv6 pool: IPV6-STATEFUL
! Address allocation prefix: 2001:DB8:ACAD:1::/64 valid 172800 ! preferred 86400 (2 in use, 0 conflicts)
! DNS server: 2001:4860:4860::8888
! Domain name: example.com
! Active clients: 2
R1#
```
The **`show ipv6 dhcp binding`** command displays the IPv6 link-local address of the client and the global unicast address assigned by the server.
:::info
This information is maintained by a stateful DHCPv6 server. A stateless DHCPv6 server would not maintain this information.
:::
```pug
R1# show ipv6 dhcp binding
! Client: FE80::192F:6FBC:9DB:B749
! DUID: 0001000125148183005056B327D6
! Username : unassigned
! VRF : default
! IA NA: IA ID 0x03000C29, T1 43200, T2 69120
! Address: 2001:DB8:ACAD:1:A43C:FD28:9D79:9E42
! preferred lifetime 86400, valid lifetime 172800
! expires at Sep 27 2019 09:10 AM (171192 seconds)
R1#
```
---
---
{%hackmd 7PGmjAHeTXak2VUM3iw5Wg %}
Sign in with Wallet
Connect another wallet