Skip to main content
Satory
Satory
Explorer
April 7, 2023
Question

PXE and SCCM

  • April 7, 2023
  • 2 replies
  • 9219 views

We have the following setup: 

A FortiGate router in the middle of the network with few cisco switches, which host several VLAns.

Also we have a MS SCCM server in vlan 10 and a bunch of workstations in vlan 20, which should be booted trough PXE/SCCM and network install the OS.

 

So far we installed IP and DHCP on vlan 20, the PCs go till getting an IP address, but the SCCM boot and install is failing with "no boot device detected". How may I setup an working environment - the DHCP should stay on FortiGate. I tried to put ip helper-address on cisco in vlan 20, but that did not helped.

2 replies

gfleming
Staff
gfleming
Staff
April 8, 2023

Is the FortiGate doing the inter-VLAN routing? Or is the Cisco?

If the FortiGate is doing the routing you need to ensure there is a FW policy allowing the PXE Boot traffic.

 

Do you know what protocol/ports the PXE boot is using? DO you need to make any special DHCP server configurations to make it work? Have you done that?

Satory
SatoryAuthor
Explorer
April 10, 2023

Yes, the FortiGate is doing the routing and there is a rule, allowing the traffic.

gfleming
Staff
gfleming
Staff
April 10, 2023

And the rest of my questions?

 

Do you know what protocol/ports the PXE boot is using? DO you need to make any special DHCP server configurations to make it work? Have you done that?

Satory
SatoryAuthor
Explorer
April 20, 2023

The only solution I have found is to use the CISCO switch and define ip helper addresses.
The drawback - you have to define IP address of the switch in the same VLan, which is a security issue and we cannot use the FortiGate itself to do the ip helper, which is NOT OK!

gfleming
Staff
gfleming
Staff
April 20, 2023

You can absolutely use FortiGate to do DHCP relay (helper):

 

https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/783526/dhcp-servers-and-relays

Terms & ConditionsAccessibility statement