About this interactive
Almost every student meets DHCP as an acronym before they meet it as a mechanism. DORA is easy to chant and tells you nothing, and a student who can recite four letters but cannot say why the third message is a broadcast has learned a mnemonic rather than a protocol. That gap is what this activity is built to close. The cards are therefore not labelled D, O, R and A, and none of them opens with its step name. If they were, ordering them would be an exercise in remembering the alphabet and the student would never touch the knowledge the objectives name. Each card instead gives the addressing: who is sending, who they are able to address, which Layer 2 and Layer 3 addresses appear, and which UDP ports are in play. The order then has to be reasoned out, and two rules are sufficient. The first rule is who can address whom. A device that has just joined a network has no IP address and no knowledge of where any server sits, so its opening message cannot be aimed anywhere in particular — it goes out with the device's own MAC as the source, all Fs as the destination MAC, 0.0.0.0 as the source IP and 255.255.255.255 as the destination, and the switch floods it to the whole segment. That same fact fixes the second message too: a server can only reply to a client whose MAC address it has already seen, so the Offer cannot precede the Discover. The second rule is the port roles, which confirm the direction of every card. Client-originated messages always run from UDP 68 to UDP 67; server-originated messages always run from 67 to 68. The exchange visibly alternates, and a student who reads the ports can check their own ordering without being told the answer. The third message is where the real difficulty sits, and it is why the broadcast-versus-unicast question is written into the card text rather than left as trivia. By the Request the client has chosen a server, so the intuitive move is to reply only to that server. It does not. It broadcasts, and the broadcast is doing work: it is how the servers whose offers were declined discover the decision and return their reserved addresses to their available pools. The module's lesson on scopes explains why that matters in practice — redundant DHCP servers are standard, each holds its own non-overlapping pool, and without the broadcast Request every declined offer would leave an address stranded until its reservation timed out. A student who orders the four cards correctly but believes the Request is unicast has the sequence and not the mechanism, which is precisely the outcome this set is shaped to prevent. The Offer is the useful contrast and the reason it is worth naming the addressing on every card rather than only on the interesting one. It is the one message in the exchange that does not need to be broadcast, because by then the server has something no one had at the start: the client's MAC address. Setting the directly-addressed Offer beside the two broadcasts on either side of it turns broadcast-versus-unicast from a pair of definitions into a consequence of what each party knows at that moment. All four cards are presented every run rather than sampled. Four is already the whole exchange, and a DHCP handshake with a message missing is not a shorter version of the same object — completeness and order are the entire skill being assessed. This pairs directly with the module's DHCP Process lesson, which supplies the frame-level detail the cards refer to, and with the Wireshark DHCP demo, where these same four packets appear in a real capture with the ports and broadcast addresses visible on screen. Running it after the lesson and before the demo works well: the ordering forces a commitment about the addressing, and the capture then either confirms it or makes the correction concrete.
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →