Read-only audit of DHCP on MikroTik RouterOS: rogue-server alerts, pool exhaustion and starvation, static leases for infrastructure, add-arp without reply-only ARP, lease scripts with broad permission, and DHCP clients that trust the segment (peer DNS and default route on non-approved interfaces). This skill should be used when assessing DHCP server and client exposure on a RouterOS device without changing configuration.
