FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
cravikumar
Staff
Staff
Article Id 328798
Description

This article describes how to assign an IP using DHCP option 82 on FortiGate with a Cisco Switch.

 

Topology:

 

Picture1.png

Scope FortiGate.
Solution

Step 1: Enable DHCP Option 82 on the Switch:

 

Picture2.png

 

Enable DHCP Snooping Globally:

 

Switch# configure terminal

Switch(config)# ip dhcp snooping

 

Enable DHCP Snooping on Specific VLANs:

 

Switch(config)# ip dhcp snooping vlan [VLAN_ID]

 

Enable Option 82 Insertion:

 

Switch(config)# ip dhcp snooping information option

 

Configure Trust Settings:

 

Switch(config)# interface [interface_id]

Switch(config-if)# ip dhcp snooping trust

 

Verify the Configuration:

 

Switch# show ip dhcp snooping

 

Step 2: Run a capture on the FortiGate GUI or CLI to find the circuit ID and remote ID.

 

Picture3.png

 

Step 3: Configure FortiGate’s Interface:

 

Picture4.png

 

Step 4: Configure the DHCP server and Option 82 as below:

 

Picture5.png

 

Type: Option82

IP: Reserved IP address

Circuit-id and Remote-id: From the capture above.

 

Step 5: Check the Pc’s IP config:

 

Picture6.png

Contributors