25 Dynamic Host Configuration Protocol: Windows Server
Jacob Christensen
Dynamic Host Configuration Protocol (DHCP) is a client-server protocol that automatically assigns an IP address to a host (such as a PC, laptop, or phone) upon request. The activity aims to let learners observe DHCP in action rather than just study the handshake theory. It also introduces some frustration by showing what happens when hosts fail to receive a DHCP IP address, helping learners understand packet movement and where delays may occur in ensuring DHCP functions properly.
Estimated time for completion: 60 minutes
Phase 0 – Professional Alignment
Enterprise organizations commonly deploy Windows Server to provide core network services such as Dynamic Host Configuration Protocol (DHCP). In this chapter, you will configure Windows Server to automatically assign IPv4 addresses to network clients while observing DHCP and ARP traffic with Wireshark. By completing this lab, you will gain practical experience administering a Microsoft-based network service that is widely used in enterprise environments.
DCWF Work Roles
The knowledge and skills developed in this chapter align with the following Department of Defense Cyber Workforce Framework (DCWF) work roles:
- 441 – Network Services Specialist
- 531 – Systems Administrator
- 511 – Network Operations Specialist
NICE Work Roles
This chapter supports competencies associated with the following NICE Workforce Framework for Cybersecurity work roles:
- Network Services Specialist
- Systems Administrator
- Network Operations Specialist
Professional Skills
By completing this chapter, you will begin developing the ability to:
- Deploy and configure DHCP services using Windows Server.
- Configure IPv4 address scopes and client network settings.
- Capture and analyze DHCP and ARP traffic using Wireshark.
- Validate automatic client network configuration.
- Troubleshoot DHCP service and client connectivity issues.
- Administer enterprise network services using Windows Server and PowerShell.
What You’ll Be Able to Do
After completing this chapter, you should be able to:
- Configure a Windows Server to provide DHCP services for an enterprise network.
- Create and manage a DHCP scope that automatically assigns IPv4 addresses to client systems.
- Verify that client devices receive valid network configuration information.
- Capture and interpret the DHCP Discover, Offer, Request, and Acknowledgment (DORA) process using Wireshark.
- Capture and analyze ARP traffic to observe Layer 2 address resolution.
- Diagnose and resolve common DHCP configuration and client connectivity issues.
Learning objectives
- Successfully deploy a DHCP solution using Windows on an enterprise network
- Capture and Observe DHCP packets using Wireshark
- Capture and Observe ARP packets using Wireshark
- Successfully add hosts to an enterprise network and receive IP addresses automatically
Prerequisites
Deliverables
- 4 Screenshots:
- Wireshark – DHCP Packets for PC1
- Wireshark – DHCP Packets for PC2
- GNS3 Workspace
- Configuration of Windows Server
Resources
Contributors and testers
- Mathew J. Heath Van Horn, PhD, ERAU-Prescott
Phase I -Build the Network Topology
The following steps are to create the baseline for completing the lab. It makes assumptions about the learner’s knowledge from completing previous labs. By the end of this lab, your network should look like the following:

- Open GNS3 and create a new project
- Create the baseline network with an address space of 200.200.200.0/24
NOTE: This example uses the same network topology created in the previous chapter: DHCP using Linux.
- Use two VPCS devices for PC1 and PC2
- Add an Ethernet switch
- Add a Windows Server VM and rename it to dhcp-server
NOTE: This lab was tested on Windows Server 2016, but later versions should also work.
- Connect the server and PCs to the switch
- Label and organize your network as necessary

Figure 2: Network topology
Phase II – Configure a Network Interface in Windows
For Windows Server to reliably provide DHCP services, the server should be assigned a static IPv4 address on the network.
- Start dhcp-server and log in
- Press Win + R to open the Run dialog
NOTE: Alternatively, right-click Start and select Run
- Type ncpa.cpl and press Enter to open the Network Connections window in Control Panel

Figure 3 – Opening adapter configuration panel - Right-click Ethernet, then select Properties

Figure 4 – Selecting interface properties - Uncheck Internet Protocol Version 6 (TCP/IPv6)
- Highlight Internet Protocol Version 4 (TCP/IPv4) and click Properties

Figure 5 – Selecting IPv4 properties - Select Use the following IP address, then enter the following settings:
- IP address: 200.200.200.254
- Subnet mask: 255.255.255.0
- Default gateway: Leave blank
- Leave the Preferred DNS server and Alternate DNS server fields blank, since this lab does not use DNS

Figure 6 – Assigning a static IPv4 address - Click OK to apply these settings and Close to return to the Network Connections window
- Open a Run dialog, type powershell.exe, then press Enter to start a PowerShell session
- In PowerShell, verify that the static IP address was applied successfully
Get-NetIPAddress -InterfaceAlias “Ethernet” | Format-Table IPAddress, PrefixLength
NOTE: If your interface name is not “Ethernet”, adjust the command accordingly.

Figure 7 – Verify the new IP was applied
Phase III – Installing the Windows Server DHCP Role
Windows Server provides many customizable roles and features. This section covers the installation and configuration of the DHCP Server role.
- If Server Manager is not already open, open the Run dialog, type servermanager.exe, then press Enter
- Select Manage in the upper-right corner, then select Add Roles and Features from the drop-down menu

Figure 8 – Windows Server roles and features - The Add Roles and Features Wizard will open:
- Before you Begin – Click Next
- Installation Type – Select Role-Based or feature-based installation, then click Next
- Server Selection – Select the local machine (this should be the only option), then click Next
- Server Roles – Select DHCP Server

Figure 9 – Select DHCP Server for installation - Leave Include management tools selected, then click Add Features

Figure 10 – Add new feature - Features – Click Next
- DHCP Server – Click Next
- Confirmation – Click Install
- Open the Post-Install Wizard by selecting Complete DHCP configuration

Figure 11 – Conclude with the post-installation wizard - Description – Click Commit
- Summary – Click Close
- Return to the Add Rolls and Features Wizard and click Close
Phase IV – Configure the Windows Server DHCP Role
In this section, we will assign a range of IP addresses for end devices connecting to our network that do not have a manually configured IP address.
- Launch DHCP Manager by clicking Tools in the upper-right corner, then selecting DHCP from the drop-down menu

Figure 12 – Open DHCP Manager - In the DHCP console tree, expand the local server, right-click IPv4, then select New Scope

Figure 13 – Adding a New Scope - In the New Scope Wizard welcome page, click Next
- On the Scope Name page, enter a name and optional description for the DHCP scope, then click Next

Figure 14 – Scope name - On the IP Address Range page, enter the following values:
Description IP Address Start IP address 200.200.200.20 End IP address 200.200.200.200 Length 24 Subnet mask 255.255.255.255 
Figure 15 – Configuring lease address range - Click Next
- In Add Exclusions and Delay, click Next
- In Lease Duration, leave the default value at 8 days and click Next
- On the Configure DHCP Options page, select No, I will configure these options later, and click Next

Figure 16 – Skip adding DHCP options - Click Finish to exit the New Scope Wizard
- Under the IPv4 tree, right-click the new scope, and click Activate to enable it

Figure 17 – DHCP pool activation - Start a PowerShell session and use the following command to verify the scope is active
Get-DhcpServerV4Scope -ScopeID “200.200.200.0” | Format-Table Name, State, StartRange, EndRange

Figure 18 – Verify the DHCP pool is active
Phase V – Watch DHCP in Action
This lab is an opportunity for you to see these activities in action without the chaff that exists on an existing enterprise network.
- DHCP automatically assigns an IP address to interfaces requesting one.
- ARP is for interfaces that already have an IP address, but the interface needs to tell all of the other interfaces on the network.
- Navigate back to GNS3
- Start a Wireshark capture on the Server-Switch link
- Start PC1, open its console, and request a new IP address
> ip dhcp
- Notice the four main DHCP packets being exchanged in Wireshark that were discussed in the previous chapter: Discover, Offer, Request, Accept

Figure 19 – DHCP capture in Wireshark - Repeat for PC2, so it also receives a new address
- Ensure that PC1 is able to ping PC2 to demonstrate network connectivity
Phase VI – Bonus! Configuring Window DHCP Server with PowerShell
- Set a static IP address
$StaticIP = @{
InterfaceAlias = ‘Ethernet’
PrefixLength = 24
IPAddress = ‘200.200.200.254’
AddressFamily = ‘IPv4’
}New-NetIPAddress @StaticIP - Install the DHCP Server role
Install-WindowsFeature -Name DHCP -IncludeManagementTools
- Check the status of the DHCP server
Get-Service -Name DhcpServer
- Update the registry to show the DHCP Server role is configured
$RegUpdate = @{
Path = ‘HKLM:\SOFTWARE\Microsoft\ServerManager\Roles\12’
Name = ‘ConfigurationState’
Value = 2
}Set-ItemProperty @RegUpdate - Restart the service
Restart-Service -Name DhcpServer
- Create a new DHCP pool
$DhcpScope = @{
Name = ‘blue.net’
StartRange = ‘200.200.200.20’
EndRange = ‘200.200.200.200’
SubnetMask = ‘255.255.255.0’
LeaseDuration = ‘0.8:00:00’
State = ‘Active’
} -
Add-DhcpServerV4Scope @DhcpScope
- Verify the pool is active
Get-DhcpServerV4Scope -ScopeID ‘200.200.200.0’
Career Connection
Windows Server continues to be one of the most widely deployed platforms for enterprise infrastructure services. Systems administrators and network engineers routinely configure DHCP to automate IP address management, reduce administrative overhead, and ensure consistent network connectivity for users and devices. Equally important is the ability to validate service operation through packet analysis and troubleshooting. The skills developed in this chapter reflect common responsibilities in enterprise IT environments where Microsoft infrastructure and automated network services play a central role.
End of Lab
Deliverables
4 screenshots are needed to receive credit for this exercise:
- Wireshark – DHCP Packets for PC2
- Wireshark – DHCP Packets for PC3
- GNS3 Workspace with 2 PCs, switch, and DHCP server – all devices labeled with their IP addresses
- Configuration settings of Windows Server DHCP
Homeworks
Assignment 1 – Combined network traffic watching
- Turn off all devices
- Replace the switch with a hub and reconnect all devices
- Monitor any of the PCs with Wireshark and capture ARP, DHCP, and ICMP packets for all three PC’s as you turn devices back on
- RECOMMENDED GRADING CRITERIA
- Screenshot of GNS3 environment with everything labeled
- Screenshot of DHCP for one PC
- Screenshot of ICMP for one PC
Assignment 2 – Reconfigure the DHCP server
- Figure out the number of devices that can be attached to the switch
- Generate a random IP address and choose a subnet that will allow the use of all the switch connections with as few wasted IP addresses as possible
- Reconfigure the network to use these new network addresses
- Reconfigure the DHCP settings to issue IPv4 address in this new space
- RECOMMENDED GRADING CRITERIA
- Screenshot of the DHCP configuration
- Screenshot of the GNS3 workspace
- Screenshot of DHCP of one PC
- Screenshot of ICMP of one PC
