Network Lab diagram Hey All,

I was working on DHCP lab As seen in the below figure when I take a pcap between e2 and R1 [in a situation where i shutdown the f0/0 interface on R1 and startup again] I see an ARP happening after DHCP Discover.

However when I remove the R1 machine from network and setup a fresh machine and once the machine comes up for the very first I see DORA happening without any ARP.

Screenshots as below

DHCP after shutting fown the interface

However if I bring the machine up for the first time in network I see below pcap

enter image description here

I want tpo know why an ARP is happening after DHCP discover and that ARp is initiated from the DHCP Server ..which makes me confirm that it is not ARP probe, as per rfc2131

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer.
    – Ron Maupin
    Commented Dec 15, 2019 at 4:29

1 Answer 1


What you're seeing is a gratuitous ARP (as a reply) originating from the DHCP client being broadcast to the whole subnet. It informs anyone interested of the (possibly new) MAC for


The ARP between DHCP Discover (client) and DHCP Offer (server) is the server checking whether the IP address is in use before OFFERing, as per RFC 2131 3.1:

When allocating a new address, servers SHOULD check that the offered network address is not already in use;

  • Well its not about the GARP its about the ARP after DHCP Discover Commented Jul 8, 2019 at 8:38
  • @user1974278 I have added that to my answer. Your question wasn't clear on which one you mean.
    – Zac67
    Commented Jul 8, 2019 at 13:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.