DHCP Relay Issue on VLANs with FortiLink over IPSec (FortiGate 91G / FortiSwitch)

[acorniola]

Hello everyone,

 

have a FortiGate 91G managing a FortiSwitch via FortiLink over IPSec. While the FortiLink connection is successfully established, when I configure the DHCP relay on the VLANs, client devices are not receiving IP addresses.

Has anyone encountered this problem or found a solution? Any guidance would be greatly appreciated!

Thank you in advance.

[AEK]

Hi Acorniola

With "diag sniffer packet any ...", check if the DHCP queries are properly forwarded to destination 192.168.88.1. Also check with the same command if the DHCP replies are blocked somewhere.

[AEK]

Here in your config I see DHCP server 192.168.88.1 is in the same subnet as the interface address, and if I'm not wrong it is in the same broadcast domain as the clients, right?

In that case why you configure DHCP relay? If they are on the same broadcast domain as the DHCP server then their DHCP request should reach the DHCP server without need to configure relay.