FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes the scenario where there is an SSID running on Tunnel Mode and has DHCP enabled on that SSID, but not handing out the DHCP lease to the clients.
Scope
FortiGate v7.4.
Solution
Make sure that the below settings are not enabled on the FortiGate:
config sys npu
set capwap-offload enable <----- If it is enabled, disable it.
end
After making the above changes, restart the wireless controller using the below command:
execute wireless-controller restart-acd
For more information, refer to the following articles:
