Skip to main content
Matteo
Visitor III
August 10, 2016
Question

How to enable the DHCP rouge server notification on a FortiGate

  • August 10, 2016
  • 2 replies
  • 6228 views

Hi,

I'm wondering if the fortigate unit is able to understand that there could be a DHCP rouge server, for example by sending a warning/error message. I enabled the DHCP server feature on many fortigate interfaces (FortiGate 100D).

In fact some weeks ago a user installed a DHCP rouge server for testing on his machine, and that server caused some issue.

 

Many thanks

    2 replies

    FortiOSman
    New Member
    August 11, 2016

    Greetings Matteo,

     

    'DHCP Snooping' is the term you are looking for. This feature is enabled at the switch level, not at the firewall. Enabling it and configuring SNMP traps for alerting will do what you want.

     

    https://en.wikipedia.org/wiki/DHCP_snooping

     

     

    -FortiOSman

    Up, Up, and Away!

     

    Matteo
    MatteoAuthor
    Visitor III
    August 12, 2016

    Many thanks FortiOSman! I didn't know the feature name (DHCP snooping), and it's exactly what I was looking for. I hoped it could be enabled at fortigate level ...

    Thanks!

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.