A DHCP scope is a range of IP addresses that the DHCP server can lease to clients. To create and manage scopes, you first define IP address ranges within your network’s address space. Next, you configure exclusion pools to reserve specific IPs that the DHCP server should never assign, such as addresses used by static devices. You also set up reservations to guarantee that certain devices, like printers or servers, always receive the same IP. Adjust lease durations based on how often devices connect and disconnect: shorter leases work well for guest networks, while longer leases suit stable, always-on devices. Finally, implement failover configurations so that if one DHCP server goes down, another takes over without interrupting IP assignments.
A process flow showing the steps to configure a DHCP scope, from defining IP ranges to implementing high availability failover.
Static CIDRs are fixed IP blocks that you assign to specific subnets or services. In the Azure portal, browse to your IP address pool, select Allocate under Settings, then click + Create and choose Allocate static CIDRs. You must enter a Name, a Description, and the CIDR block details. This process ensures that critical network segments always have predictable addressing, which is especially important when integrating on-premises and Azure VM networks.
Monitoring how your IP address space is used helps you plan for growth and avoid exhaustion. Navigate to your IP address pool and select Allocations under Settings. Examine statistics such as Pool address space, Allocated address space, and Available address space. These metrics show you how many addresses are already taken, how many remain, and whether you need to expand the pool or reclaim unused addresses.
Managing who can modify IP address pools is a security best practice. Go to the IP address pool settings, select Access control (IAM), and add role assignments using Azure RBAC. For example, assign the IPAM Pool User role to a team that needs to view or update allocations but should not change the overall pool structure. This keeps the configuration secure while still allowing delegated administration.
To keep DHCP services running even during a failure, you need a high availability setup. In Azure, you can use Azure VMware Solution to create a DHCP server or relay. Define segments and configure subnets that consume the DHCP services. If needed, use NSX Manager to host the DHCP server directly. These steps ensure that IP addressing remains consistent and uninterrupted across both on-premises and Azure VM networks, providing resilience against single points of failure.
Eager to master hybrid server management? Discover how to administer Windows Server Hybrid Core Infrastructure on Azure, setting your path towards the Microsoft Certified: Azure Hybrid Infrastructure Administrator Associate certification!
Prepare and test your skills

Prepare and test your skills

An exclusion pool reserves specific IP addresses that the DHCP server will never assign, such as those used by static devices, whereas a reservation guarantees that specific devices like printers or servers always receive the same IP address.
To allocate static CIDRs, browse to your IP address pool in the Azure portal, select Allocate under Settings, click + Create, and choose Allocate static CIDRs. You must then specify a Name, a Description, and the CIDR block details.
High availability can be set up by using Azure VMware Solution to create a DHCP server or relay, defining segments, and configuring subnets that consume the services. You can also use NSX Manager to host the DHCP server directly to maintain consistent IP addressing across on-premises and Azure VM networks.