Skip to main content
Esteemed Contributor III
February 16, 2010
Question

DHCP Limits?

I am using FortiGate also as a DHCP server, because in a HA failover arrangement I get failover security also for DHCP. Now: I wonder if it is OK to use FortiGate for as many as 500 leases, or there is a danger to overflow some internal tables, or to slow down the firewall ? The model is FortiGate 300A, with V4.0 MR1 Patch 1. TIA Alex

    5 replies

    abelio
    SuperUser
    SuperUser
    February 16, 2010
    not 500, for that model/firmware you can define until 200 leases for each interface check http://kb.fortinet.com for ' Fortigate Maximum values Matrix version 4.0'
    Esteemed Contributor III
    February 16, 2010
    Thanks Abel. My understanding is that the 200 limit in ' Fortigate Maximum values Matrix version 4.0' reffers to reservations (as defined by config system dhcp reserved-address), not to leases. Besides, I already have over 300 leases on one of the interfaces. TIA Alex
    abelio
    SuperUser
    SuperUser
    February 16, 2010
    Indeed Alex, you' re right; the limit is for the reserved MAC<->IP table size. Regarding to your original concern, i dunno; look the memory usage as you add address over time; if you' re doing some regular monitoring, resulting memory usage graphs could show something useful. regards,
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT