We have Cisco Catalyst 4507R running IOS v12.2 that appears to be dropping valid DHCP requests. Checking for the requests using tcpdump on the DHCP server and on a machine connected to a monitoring port shows that only after 30s (and on the 8th request) does the request make it to the server.
The request packets appear to not have any indicators that would trigger the DHCP control features on the switch that I know of, and are from uBoot doing a network boot (but also show when other machines are booting)
Below is the DHCP snooping config on the switch, I do notice that the restrictions on hwaddr, giaddr and Option 82 are enabled, but these do not appear to be present/invalid in the offending packets.
bitumen>show ip dhcp snooping Switch DHCP snooping is disabled DHCP snooping is configured on following VLANs: none DHCP snooping is operational on following VLANs: none DHCP snooping is configured on the following L3 Interfaces: Insertion of option 82 is enabled circuit-id default format: vlan-mod-port remote-id: 000b.fdd5.cf00 (MAC) Option 82 on untrusted port is not allowed Verification of hwaddr field is enabled Verification of giaddr field is enabled DHCP snooping trust/rate is configured on the following Interfaces: Interface Trusted Allow option Rate limit (pps) ----------------------- ------- ------------ ----------------
(Edit: Further investigation suggests that it's not DHCP specifically being dropped, but some form of ~30s delay after the network before traffic is passed)