Troubleshooting Tip: DORA packet review in the new...

FortiNAC-F

FortiNAC-F is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks. For legacy FortiNAC articles prior to FortiNAC-F 7.2, see FortiNAC.

Article Id 415502

Description

This article describes ways to assist troubleshooting of DHCP in the newer Kea DHCP format in nacOS 7.6.3+.

Scope

FortiNAC-F 7.6.3+.

Solution

A complete DHCP cycle looks like the following:

DHCPDISCOVER is sent from Host to NAC

DHCPOFFER is sent from NAC to Host

DHCPREQUEST is sent from Host to NAC

DHCPACK from NAC to Host

Make sure the service is active and running:

execute service status kea-dhcp4

Run the following in the nacOS CLI to see the DORA process:

execute tcpdump -i port2 -v 'port 67 or port 68'

Use a packet capture application to filter against specific MACs to simplify troubleshooting:

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Troubleshooting Tip: DORA packet review in the newer Kea DHCP format

You are leaving our website