Skip to main content
viswanath_suri
New Member
May 13, 2020
Question

DHCP not working on VLAN

  • May 13, 2020
  • 2 replies
  • 6334 views

Hello,

We are using fortiGate 60F v6.0.6. Recently we created a new Hardware Switch interface with 2 of the LAN ports as members 

The role is LAN and the IP/Netmask is 0.0.0.0/0.0.0.0.

Under this hardware switch interface, we have created a VLAN, role as LAN and the IP/Netmask is 10.21.14.1/255.255.255.0

DHCP server is enable in VLAN. 

 

Same VLAN is created in a manageable switch is tagged to the firewall VLAN.  When a laptop is connected to the VLAN ports in the Switch laptop is not getting IP addess from the VLAN pool from Firewall. 

 

See the interfaces in the firewall

Role                           IP/Netmask

Hardware Switch     0.0.0.0/0.0.0.0

VLAN                     10.21.14.1/255.255.255.0

 

 

 

Firewall DHCP logs using    diag sniff packet any "port 67 or port 68" 4

 

1264.792359 vlan in 0.0.0.0.68 -> 255.255.255.255.67: udp 300 1265.816635 vlan in 0.0.0.0.68 -> 255.255.255.255.67: udp 316 1397.432855 vlan in 0.0.0.0.68 -> 255.255.255.255.67: udp 310

 

Please suggest he necessary steps to get IP connected from DHCP server in firewall VLAN thru the switch.

 

 

 

 

    2 replies

    Contributor III
    June 3, 2020

    Example: config system interface edit “xxxxxxx” set vdom "root" set allowaccess ping set role lan set snmp-index 54 set switch-controller-dhcp-snooping disable set interface "fortilink" set vlanid 140 next End

     

    Reference: 

    https://forum.fortinet.com/tm.aspx?m=148713

    live89
    Explorer III
    June 4, 2020

    Hi Barak,

    He has FortiGate, not FortiSwitch..

     

    viswanath.suri, Could you attach the "sh full" output of "config system dhcp server"

    Also have you tried to connect a PC directly to the fortigate just to see if the problem is from the fortigate itself or from your manageable switch?

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.