3.3.5.1 Receiving a DHCP Failover CONNECT Message
When a DHCP server implementing this specification receives a CONNECT message, it MUST validate all of the mandatory options as specified in [IETF-DHCPFOP-12] except for the TLS-Request option.
The DHCP server MUST NOT use the values provided in the CONNECT message corresponding to the Max Unacked BndUpd, Receive timer, Vendor Class Identifier, MCLT, Protocol Version, and Hash Bucket Assignment options. These values are configurable by the administrator and MUST adhere to the conditions specified in section 1.5.
If the CONNECT message contains the TLS-Request option, the option is ignored. The remainder of the message is processed as specified in [IETF-DHCPFOP-12] section 7.9.1.
In response to the CONNECT message, the DHCP server operating in the secondary role in a failover configuration MUST send a CONNECTACK message as specified in [IETF-DHCPFOP-12].