11-02-2020 03:43 AM
A TCP dump reveals, that the Dhcp server very often /allways replies to the client on port 67 when a proxy is involved. I need to get my head around this. Port 67 should be used by the server and port 68 by the client. Why do we reply to the client on port 67 when a proxy is involved?
Solved! Go to Solution.
11-04-2020 10:05 PM
Does proxy means the dhcp relay?
About why dhcp server always replies using port 67, as fas as i know that this port is used by the server to receive and reply the dhcp packets from clients although there is dhcp relay in the middle. and port 68 is used by the client to receive and sent dhcp packet.
11-05-2020 12:49 AM
Yes talking about Proxy i mean the router between the Dhcp server and the client.
You are right about the ports, 68 used by clients 67 used by (open at) server. Hence im currious why i see server responding to clients on port 67 (like expecting them - or maybe the proxy having an open service on port 67), actualized by firewall rules.
11-05-2020 03:04 PM - edited 11-05-2020 03:05 PM
yes you are correct that the proxy (relay agent) always listen to port 67. like mention in the ietf dhcp implementation draft: https://tools.ietf.org/html/draft-ietf-dhc-implementation-02
+ Relay Agent Port Usage
Relay agents should use port 67 as the source port number. Relay agents always listen on port 67, but port 68 has sometimes been used as the source port number probably becuase it was copied from the source port of the incoming packet.
Hope that can answer your question.