Overview
When a device joins a network, it needs an IP address, a subnet mask, a gateway, and DNS servers before it can communicate. Configuring all that by hand on every device does not scale. DHCP (Dynamic Host Configuration Protocol) automates it. This lesson explains what DHCP does and why it exists.
Learning objectives
- State the purpose of DHCP.
- List the configuration parameters DHCP provides.
- Contrast dynamic with static addressing.
Core concept
DHCP automatically assigns IP configuration to devices as they join a network. Instead of an administrator manually setting each device, a DHCP server hands out the settings a host needs:
- IP address (leased from a pool)
- Subnet mask
- Default gateway
- DNS server(s)
- Often other options (e.g. NTP servers, domain name)
This is dynamic addressing: the host asks, the server assigns. The alternative is static addressing, where settings are configured manually and fixed.
How it works
A DHCP server manages a pool (scope) of addresses for a network and leases them to clients for a limited time. When a device connects, it broadcasts a request; the server responds with an available address and the accompanying settings; the device configures itself automatically. This lets hundreds or thousands of devices join and leave a network without manual work, while the server tracks which addresses are in use to avoid conflicts.
Practical example
You connect a laptop to office Wi-Fi. Within moments it has a working IP address, knows its gateway, and can resolve names — all without you typing anything. Behind the scenes, the DHCP server picked an unused address from its pool and sent it along with the mask, gateway, and DNS settings. Disconnect and reconnect elsewhere, and the process repeats with settings appropriate to that network.
Cybersecurity relevance
DHCP's automatic, trust-based nature creates security considerations. A rogue DHCP server on a network can hand out malicious settings — for example, pointing clients to an attacker-controlled gateway or DNS server for interception. Defenders use controls like DHCP snooping on switches to permit only authorized DHCP servers. Understanding what DHCP provides clarifies exactly what a rogue server could tamper with.
Common mistakes
- Thinking DHCP only assigns an IP — it also provides mask, gateway, DNS, and other options.
- Assuming addresses are permanent — dynamic addresses are leased and can change.
- Overlooking rogue-DHCP risk on untrusted networks.
Key takeaways
- DHCP automatically assigns IP configuration (address, mask, gateway, DNS) to devices joining a network.
- It replaces manual (static) configuration, enabling networks to scale without per-device setup.
- Because clients trust DHCP responses, a rogue DHCP server is a real threat, mitigated by controls like DHCP snooping.
Check your understanding
- Besides an IP address, what other settings does a DHCP server typically provide?
- Why is a rogue DHCP server dangerous, and what could it tamper with?