Skip to main content
DarkOlive871
Visitor III
October 15, 2025
Question

DHCP over a router and Scope Naming

  • October 15, 2025
  • 4 replies
  • 919 views

I'm working with a FortiGate running version 7.4.9. The current setup has a single subnet between the FortiGate and our on-prem router. However, behind that router, there are many VLANs and subnets on the LAN. I’d like to move DHCP services for those internal VLANs to the FortiGate, but the FortiGate doesn’t currently have Vlan interfaces or routes for those downstream subnets. 

What’s the best way to configure DHCP on the FortiGate in this scenario?

Or is there a way for the FortiGate to serve DHCP to those VLANs without having direct interfaces in each subnet?

I have the DHCP Helper disabled but already setup. How do you Name the DHCP Vlans? 

 

I also didn't see a way to name the scopes? 

 

Thanks in advance for any guidance!
FortiGate  

4 replies

AEK
SuperUser
SuperUser
October 15, 2025
DarkOlive871
Visitor III
October 15, 2025

This helps a lot. I emailed my SE for a Feature Request about the Scope naming, I don't see it ANYWHERE in the cli. On 30+ different scopes it makes it a huge pain.   

This is a little scary, Since they will all be the same relay agent. 
"When the IP pool is exhausted, the DHCP daemon assigns the IP from other pools that have the same relay agent."

DarkOlive871
Visitor III
October 15, 2025

Is there a max amount of dhcp scopes? 

FW-01 # config system dhcp server

FW-01 (server) # edit 12
Command fail. Return code -4 (reached the maximum number of entries)

Toshi_Esumi
SuperUser
SuperUser
October 15, 2025

depending on the model. But the smallest ones like 40F, 30G has max 32. You can check it below:
https://docs.fortinet.com/max-value-table
You wouldn't be able to choose 7.4.9 yet but 7.4.8 should have the same limit.

Toshi

AEK
SuperUser
SuperUser
October 16, 2025

32 is still far.

Can it be caused by system.dhcp.server:ip-range is limited to 10?

AEK
DarkOlive871
Visitor III
October 16, 2025
AEK
SuperUser
SuperUser
October 16, 2025

36 will not be possible with this small FGT. If you have a separate DHCP server (like your AD) it would be better.

AEK
DarkOlive871
Visitor III
October 16, 2025

Anyway, to change the limit? 

AEK
SuperUser
SuperUser
October 16, 2025

As per my knowledge it is not possible to change.

AEK