Domain 2 of 5 · Chapter 2 of 3

SOHO Networks

Unlock the complete study guide + 1,040 practice questions across 16 full exams.

Bundled into the existing CompTIA A+ Core 1 premium course — no separate purchase.

14-day money-back guarantee — no questions asked.

Included in this chapter:

  • IPv4 addressing: the four settings a host needs
  • Static, DHCP, and reservations
  • APIPA: the address that means DHCP failed
  • The SOHO router: NAT and port forwarding
  • Wireless setup: SSID, bands, and WPA
  • IPv6 on a SOHO network
  • Client VPN for secure remote access

How a host gets its IPv4 address: dynamic, reserved, or static

AspectDHCP (dynamic)DHCP reservationStatic (manual)
Who assigns itDHCP server, any free address from the scopeDHCP server, fixed to the device MACYou, typed on the device itself
Stable over time?No, can change at each lease renewalYes, always the same IPYes, until you change it
Configured whereNothing on the clientCentrally on the router/DHCP serverLocally on each device
Best forLaptops, phones, general clientsPrinters, NAS, port-forward targetsThe router, servers, infrastructure
Managing many devicesLowest effort, fully automaticLow, one console lists every reservationHighest effort, per-device and error-prone

Decision tree

Host has a 169.254.x.x address?APIPA: DHCP failedfix DHCP or set staticYesNoNeeds a fixed address?DHCP (dynamic)laptops, phonesNoYesRouter assigns it by MAC?DHCP reservationprinter, NASYesNoStatic (set on the device)router, servers, outside the scope

Cheat sheet

  • Every IPv4 host needs an IP, subnet mask, default gateway, and DNS server
  • The subnet mask splits an address into network and host, and /24 equals 255.255.255.0
  • Without a default gateway a host reaches only its own subnet
  • Misconfigured DNS breaks names while numeric IPs still work
  • RFC 1918 reserves three private IPv4 ranges for internal use
  • NAT lets many private hosts share one public IP address
  • DHCP leases addresses to clients from a defined scope
  • A DHCP client gets its lease through the DORA exchange
  • A DHCP reservation pins an IP by MAC; a static address is set on the device
  • Put static addresses outside the DHCP scope to avoid conflicts
  • Point a port forward at a device with a reserved or static IP
  • Forward a single port rather than exposing a host in the DMZ
  • UPnP opens port forwards automatically, which is a security risk
  • Choose WPA3, fall back to WPA2 with AES, and never WEP or original WPA
  • WPA3-Personal uses SAE to block offline password cracking
  • On a WPA2 network choose AES, not the legacy TKIP cipher
  • Put visitors and IoT devices on an isolated guest network
  • Hiding the SSID is tidiness, not real security
  • MAC filtering is easily defeated by spoofing
  • Change the router's default administrator password first
  • IPv6 addresses are 128-bit, written in colon-separated hex
  • IPv6 needs no NAT and can self-configure with SLAAC
  • A client VPN tunnels a remote device onto the private network
  • A full tunnel routes all traffic; a split tunnel only the private-network traffic

Unlock with Premium — includes all practice exams and the complete study guide.

Also tested in

References

  1. RFC 2131: Dynamic Host Configuration Protocol Whitepaper
  2. RFC 3927: Dynamic Configuration of IPv4 Link-Local Addresses Whitepaper
  3. RFC 1918: Address Allocation for Private Internets Whitepaper
  4. RFC 3022: Traditional IP Network Address Translator (Traditional NAT) Whitepaper
  5. CompTIA A+ Certification (Core 1 exam objectives)
  6. Wi-Fi Alliance: Wi-Fi Security (WPA3-Personal / SAE)
  7. RFC 7664: Dragonfly Key Exchange (SAE) Whitepaper
  8. RFC 4291: IP Version 6 Addressing Architecture Whitepaper
  9. RFC 4862: IPv6 Stateless Address Autoconfiguration (SLAAC) Whitepaper