Fortinac DHCP Fingerprint

@HS08 I tested in a lab with firmware 7.6.5 and got similar results ‘set status disable’. After manually enable it from CLI ‘set status enable’ the relay and server tested to work simultaneously:

2026-08-08 10:20:10.135034 SAAdministrata in 0.0.0.0.68 -> 255.255.255.255.67: udp 293
2026-08-08 10:20:10.135427 port3 out 10.7.132.1.67 -> 10.6.3.61.67: udp 311
2026-08-08 10:20:10.135862 SAAdministrata out 10.7.132.1.67 -> 10.7.132.11.68: udp 300
2026-08-08 10:20:10.135877 port7 out 10.7.132.1.67 -> 10.7.132.11.68: udp 300
2026-08-08 10:20:10.137659 port3 in 10.6.3.61.67 -> 10.7.132.1.67: udp 277
2026-08-08 10:20:10.137896 SAAdministrata out 10.7.132.1.67 -> 255.255.255.255.68: udp 259
..
FNAC capture:

10:20:10.255283 port2 In  IP (tos 0x0, ttl 63, id 51126, offset 0, flags [none], proto UDP (17), length 339)
    10.7.132.1.67 > 10.6.3.61.67: BOOTP/DHCP, Request from 02:09:0f:00:09:02, length 311, hops 1, xid 0x8d816650, secs 1, Flags [none]
          Gateway-IP 10.7.132.1
          Client-Ethernet-Address 02:09:0f:00:09:02
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Request
            Client-ID (61), length 7: ether 02:09:0f:00:09:02
            Parameter-Request (55), length 17:
              Subnet-Mask (1), Time-Zone (2), Domain-Name-Server (6), Hostname (12)
              Domain-Name (15), MTU (26), BR (28), Classless-Static-Route (121)
              Default-Gateway (3), Static-Route (33), YD (40), YS (41)
              NTP (42), Unknown (119), Classless-Static-Route-Microsoft (249), Unknown (252)
              RP (17)
            MSZ (57), length 2: 576
            Requested-IP (50), length 4: 10.7.132.11
            Hostname (12), length 9: "DebSalone"
            Agent-Information (82), length 16:
              Circuit-ID SubOption 1, length 14: SAAdministrata
10:20:10.256057 port2 Out IP (tos 0x10, ttl 128, id 0, offset 0, flags [DF], proto UDP (17), length 305)
    10.6.3.61.67 > 10.7.132.1.67: BOOTP/DHCP, Reply, length 277, hops 1, xid 0x8d816650, Flags [none]
          Gateway-IP 10.7.132.1
          Client-Ethernet-Address 02:09:0f:00:09:02
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: NACK
            Server-ID (54), length 4: 10.6.3.61
            Client-ID (61), length 7: ether 02:09:0f:00:09:02
            Agent-Information (82), length 16:
              Circuit-ID SubOption 1, length 14: SAAdministrata
..
fortinet@DebSalone:~$ ip a

3: ens4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 02:09:0f:00:09:02 brd ff:ff:ff:ff:ff:ff
    altname enp0s4
    inet 10.7.132.11/24 brd 10.7.132.255 scope global dynamic noprefixroute ens4
       valid_lft 604785sec preferred_lft 604785sec