The following section is a summary of the major points you should be aware of in this chapter.
Understanding DHCP
- DHCP is used to dynamically assign hosts with IP addressing information
- DHCP can provide IP address, mask, default gateway, and DNS servers
- DHCP uses UDP port 68
- Cisco IOS routers and some switches can be configured as DHCP clients and servers
- DHCP is a client / server protocol
- DHCP clients transition through a series of states upon initialization
- DHCP clients transition through the following states:
- Initializing
- Selecting
- Requesting
- Bound
- Renewing
- Rebinding
- DHCP clients send out a DHCPDISCOVER message during the initializing phase
- DHCP servers respond with a DHCPOFFER message
- DHCP clients transition to the selecting state after the DHCPOFFER is received
- DHCP clients then send a DHCPREQUEST and transition to the requesting phase
- DHCP servers respond with a DHCPACK message
- After the DHCPACK is received, the client transitions to the bound state
- Additional DHCP messages that can be sent by the client or server include the following:
- DHCPNAK or DHCPNACK
- DHCPDECLINE
- DHCPINFORM
- DHCPRELEASE
- Cisco IOS devices can be configured as DHCP / BOOTP Relay Agents
- DHCP / BOOTP Relay Agents forward DHCP messages to servers
- Messages between Relay Agents and servers are Unicast between the two
- By default, the ip helper-address will forward the following UDP Broadcasts:
- Trivial File Transfer Protocol (TFTP) (port 69)
- DNS (port 53), time service (port 37)
- NetBIOS name server (port 137)
- NetBIOS datagram server (port 138)
- Boot Protocol (DHCP/BOOTP) client and server datagrams (ports 67 and 68)
- Terminal Access Control Access Control System (TACACS) service (port 49)
- IEN-116 name service (port 42)
Troubleshooting DHCP
- The most common cause of problems with DHCP is device misconfigurations
- Additional issues that can cause DHCP problems include the following:
- NIC compatibility issue or DHCP feature issue
- Faulty NIC or improper NIC driver installation
- Operating System behavior or defect
- Spanning Tree issues
- CDP Is Disabled On Ports Connected to IP Phones
- DHCP Server DHCP Relay Information Option Incompatibility
- Cisco IOS DHCP/BOOTP Software Bugs
Understanding NAT
- NAT enables hosts on private networks to access resources on the Internet / public networks
- NAT is an IETF standard
- NAT converts packet headers for incoming /outgoing traffic and keeps track of each session
- The inside interface is the border interface of the organization administrative domain
- The inside local address is the IP address of a host residing on the inside network
- The inside global address is the IP address of an internal host as it appears to the outside
- The outside interface is the boundary for the administrative domain
- The outside local address is the address of an outside host as it appears to inside hosts
- The outside global address is an address that is legal and can be used on the Internet
Troubleshooting NAT
- NAT has several limitations. These limitations include the following:
- Breaking the end-to-end IP model
- The need to maintain connection state issues
- The inhabitation of end-to-end security
- Applications that are not NAT-friendly
- Address space collision
- Ratio of internal and reachable IP addresses
- Most NAT problems can be attributed to general device misconfigurations
- Common misconfigurations include the following:
- Misconfigured NAT Access Control Lists
- Asymmetric Routing
- Misconfigured NAT Address Pool
- Router Interfaces Missing NAT Commands
- In addition to misconfigurations, the following problems can also result in NAT issues:
- Layer 1 and Layer 2 Issues
- Layer 3 Issues
- Device Resource Depletion
- Incompatible Applications