DHCP Option 82 on FortiGate

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 328798

Description

This article describes how to assign an IP using DHCP option 82 on FortiGate with a Cisco Switch.

Topology:

Scope

FortiGate.

Solution

Step 1: Enable DHCP Option 82 on the Switch:

Enable DHCP Snooping Globally:

Switch# configure terminal

Switch(config)# ip dhcp snooping

Enable DHCP Snooping on Specific VLANs:

Switch(config)# ip dhcp snooping vlan [VLAN_ID]

Enable Option 82 Insertion:

Switch(config)# ip dhcp snooping information option

Configure Trust Settings:

Switch(config)# interface [interface_id]

Switch(config-if)# ip dhcp snooping trust

Verify the Configuration:

Switch# show ip dhcp snooping

Step 2: Run a capture on the FortiGate GUI or CLI to find the circuit ID and remote ID.

Step 3: Configure FortiGate’s Interface:

Step 4: Configure the DHCP server and Option 82 as below:

Type: Option82

IP: Reserved IP address

Circuit-id and Remote-id: From the capture above.

Step 5: Check the Pc’s IP config:

586

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: DHCP Option 82 on FortiGate

You are leaving our website