Skip to main content
Contributor III
February 16, 2010
Question

DHCP Limits?

  • February 16, 2010
  • 5 replies
  • 6268 views
I am using FortiGate also as a DHCP server, because in a HA failover arrangement I get failover security also for DHCP. Now: I wonder if it is OK to use FortiGate for as many as 500 leases, or there is a danger to overflow some internal tables, or to slow down the firewall ? The model is FortiGate 300A, with V4.0 MR1 Patch 1. TIA Alex

    5 replies

    abelio
    SuperUser
    SuperUser
    February 16, 2010
    not 500, for that model/firmware you can define until 200 leases for each interface check http://kb.fortinet.com for ' Fortigate Maximum values Matrix version 4.0'
    Contributor III
    February 16, 2010
    Thanks Abel. My understanding is that the 200 limit in ' Fortigate Maximum values Matrix version 4.0' reffers to reservations (as defined by config system dhcp reserved-address), not to leases. Besides, I already have over 300 leases on one of the interfaces. TIA Alex
    abelio
    SuperUser
    SuperUser
    February 16, 2010
    Indeed Alex, you' re right; the limit is for the reserved MAC<->IP table size. Regarding to your original concern, i dunno; look the memory usage as you add address over time; if you' re doing some regular monitoring, resulting memory usage graphs could show something useful. regards,
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.