Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
fortigate2
New Contributor

DHCP Server assigns over 255 IP addresses on 60C?

Does the 60C DHCP Server support assigns over 255 IP addresses on internal interface? i.e. DHCP Server Address Range: 192.168.3.2~192.168.10.254, Netmask: 255.255.0.0 ?
6 REPLIES 6
lindblom
New Contributor

Hi! First, yes, I do think it supports over 255 DHCP leases on the same interface without problems. Follow up questions: Why would you want ~2000 devices on the same subnet using dhcp? (Or well, actually 65534 devices (even if the rest is not dhcp) since you' ve specified a /16) Also, if you have a 2000 device-big network, it feels like buying a bigger fortigate is not an issue either. Or moving the dhcp server off the firewall. /Stefan
emnoc
Esteemed Contributor III

Op, here' s the specs on the max limits & values, http://docs.fortinet.com/fgt/techdocs/fortigate-max-values.pdf As an alternative to moving the dhcp server off the firewall, you could use a dhcp-relay option.

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
fortigate2

ORIGINAL: emnoc Op, here' s the specs on the max limits & values, http://docs.fortinet.com/fgt/techdocs/fortigate-max-values.pdf As an alternative to moving the dhcp server off the firewall, you could use a dhcp-relay option.
So I can' t set " DHCP Server Address Range: 192.168.3.2~192.168.10.254, Netmask: 255.255.0.0" in 60C?
rwpatterson
Valued Contributor III

No. Are you married to that address range? If all you need is 8 class C address spaces, try using a supernet of 192.168.8.0/21. This will get you 192.168.8.0-192.168.15.255. (Subnet mask 255.255.248.0)

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
fortigate2

ORIGINAL: rwpatterson No. Are you married to that address range? If all you need is 8 class C address spaces, try using a supernet of 192.168.8.0/21. This will get you 192.168.8.0-192.168.15.255. (Subnet mask 255.255.248.0)
Just a sample for " DHCP Server Address Range: 192.168.3.2~192.168.10.254, Netmask: 255.255.0.0" , actually I only have about 600 802.11n WiFi Devices / Clients need to connect to Internet through a 500Mbit Fiber, so 3 Class C address is enough, any recommend?
rwpatterson
Valued Contributor III

Use a supernet of 192.168.4.0/22. This will get you 192.168.4.0-192.168.7.255. (Subnet mask 255.255.252.0)

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
Top Kudoed Authors