DHCP Troubleshooting Process
Symptom identification: device has 169.254.x.x IP (APIPA) = DHCP failed. Device has 'wrong' IP (old lease, wrong scope) = DHCP assigned from wrong server or wrong scope. 'Limited connectivity' or no default gateway = DHCP provided partial config.
Verify DHCP client: 'ipconfig /release' then 'ipconfig /renew' forces a new DHCP request. If renewal succeeds, the previous lease may have been stale. If renewal fails with APIPA, the DHCP server is unreachable.
Check DHCP server reachability: DHCP uses broadcasts — broadcasts don't cross routers. If the device is on a different subnet than the DHCP server, a DHCP relay agent (IP helper) must be configured on the router. Verify: 'ip helper-address' on the router interface (Cisco), DHCP relay on the gateway appliance.
Check DHCP server and scope: Is the DHCP service running? Is the scope enabled? Is the address pool exhausted (no free leases)? Check DHCP server logs for errors. If the pool is exhausted: increase pool size, reduce lease time, or check for MAC address spoofing consuming leases.
Common DHCP Failures
Rogue DHCP server: an unauthorized DHCP server on the network responds to DISCOVER messages before the legitimate server — clients get wrong IP configuration (wrong gateway = no internet). Mitigation: DHCP snooping. Detection: check the gateway IP assigned — if it's not the real gateway, there's a rogue server.
DHCP scope exhaustion: all IPs in the pool are leased. New clients cannot get IPs. Fix: expand the address range, reduce lease time, check for devices holding leases indefinitely (especially printers with old leases from decommissioned IPs), add a second DHCP server.
DHCP relay misconfiguration: relay agent IP (ip helper-address) points to wrong server or is missing. Clients on remote subnets can't get IPs even though the DHCP server is working for local clients.