Technical Tip: DHCP Relay behavior in FortiProxy

FortiProxy

FortiProxy provides enterprise-class protection against internet-borne threats and Advanced Web Content Caching

Article Id 328869

Description

This article describes the behavior of DHCP relays in FortiProxy.

Scope

FortiProxy.

Solution

FortiProxy provides the option to configure a DHCP relay under system interface as below:

config system interface

edit "port1"

set vdom "root"
set dhcp-relay-service enable
set ip 192.168.1.99 255.255.255.0
set allowaccess ping https ssh http
set type physical
set snmp-index 1
set dhcp-relay-ip "192.168.2.10"

end

Even though FortiProxy has the option to configure a DHCP relay: when it receives a DHCP discover packet, FortiProxy does not forward these packets to the DHCP server. Running a DHCP relay debug does not generate any output.

The reason for this is that FortiProxy has not supported this feature until recently. As of firmware 7.2.11 and 7.4.5, it is supported.

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.