The DORA Lease Process

When a device joins a network, it gets its DHCP address through a four-step exchange remembered by the word DORA: Discover, Offer, Request, Acknowledge. Each step is a separate message between the client and the DHCP server. Understanding DORA helps you picture exactly what happens in the first second of connecting, and it makes troubleshooting clearer when one of the steps fails.

The new client has no address yet, so it cannot send to a specific server. Instead it sends a DHCP Discover as a broadcast, meaning every device on the local network hears it. The message essentially shouts, Is there a DHCP server out there? Because it is a broadcast, any DHCP server on the same network segment will receive it and can respond.

A DHCP server that hears the Discover replies with a DHCP Offer. The offer includes a proposed IP address plus the mask, gateway, DNS servers, and lease time. If more than one server exists, the client may receive several offers. The server temporarily sets that address aside so it does not hand the same one to another client while the conversation finishes.

The client picks one offer and replies with a DHCP Request. Importantly, this is also a broadcast. By broadcasting, the client tells every server, I am accepting this specific offer from this server. Any other servers that made offers see the request, realize their offer was not chosen, and release the addresses they had reserved so they are free for other clients.

The chosen server finishes with a DHCP Acknowledge (ACK). This confirms the lease and locks in the address and all its settings for the agreed time. Once the client receives the ACK, it configures its interface with the address, mask, gateway, and DNS, and it can finally communicate normally. The four-step DORA handshake is now complete.

Discover and Request are broadcasts for a simple reason: the client does not yet have a usable address, so it cannot talk to one server directly. Broadcasting lets it reach any server on the segment. The Offer and Acknowledge can be sent back even though the client lacks a finalized address because the server addresses the reply using the client hardware (MAC) address it learned from the Discover.

A device does not repeat the full DORA every time. About halfway through the lease, it sends a Request directly to the server that gave it the address, asking to extend. If the server agrees, it sends an Acknowledge and the lease resets. Renewal skips Discover and Offer because the client already knows which server to ask, making the process quick and quiet.

DHCP relies on broadcasts, but routers normally block broadcasts from crossing between networks. So how does a client get an address from a server on a different subnet? A DHCP relay agent, often built into the router, listens for Discover broadcasts and forwards them as unicast to a known DHCP server elsewhere, then passes the replies back. This lets one central server serve many subnets.

If you understand DORA you can pinpoint failures. No Offer arriving usually means no server is reachable, perhaps a missing relay or a down server. An offer followed by a DHCP NAK (negative acknowledge) instead of an ACK means the requested address is no longer valid, often after moving to a new network. Watching where the sequence stops tells you which side to investigate.

Network analyzers like Wireshark let you watch the four DORA packets in real time. You will see the Discover and Request marked as broadcasts and the Offer and Acknowledge from the server. For the Network+ exam, you should be able to name the four messages in order and know which are broadcasts. Seeing them live makes the sequence stick in memory.

The acronym DORA keeps the steps in order: Discover, Offer, Request, Acknowledge. The client speaks on Discover and Request; the server speaks on Offer and Acknowledge. They alternate. Whenever you troubleshoot a device that cannot get an address, mentally walk through DORA and ask which message is failing to arrive.

Test your DORA order.

DORA is the four-step DHCP handshake: Discover (client broadcasts a search), Offer (server proposes an address and settings), Request (client broadcasts acceptance of one offer), and Acknowledge (server confirms the lease). The client and server alternate; Discover and Request are broadcasts. Renewals skip ahead to Request, and a DHCP relay forwards broadcasts so one server can serve many subnets. Knowing where DORA stalls speeds up troubleshooting.