Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have two Cisco switches that are sending out DHCP BootRequests and they're hitting my firewall about once a minute or so. What is it trying to do? How can I stop it?alt text

share|improve this question
up vote 1 down vote accepted

BOOTREQUEST is part of the BOOTP protocol that most DHCP servers also support. Devices using BOOTP send a BOOTREQUEST. The BOOTP server will reply with the creatively named BOOTREPLY. This does answer what the device is trying to do, it's attempting to get an IP address by way of a pre-DHCP protocol.

Bootp, unlike dhcp, requires a 1:1 association between MAC address and IP address. The log message you see is generated when the DHCP server doesn't have such a thing, or doesn't have available scope on that particular subnet.

Noisy, but harmless.

Stopping it required identifying what device belongs to that particular MAC address and figuring out if you can convince it to not use bootp.

share|improve this answer
awesome, the 'Noisy, but harmless' comment is the best thing I've heard all day :) – blsub6 Oct 21 '10 at 23:11
  1. Have you verified that the source MAC address is from the Cisco switches?

  2. Do the switches have static ip addresses or are they configured to get their ip information via DHCP?

share|improve this answer
1. I have 2. I set the two vlans I have on there to have static IPs – blsub6 Oct 21 '10 at 23:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.