FortiAP + dhcp relay

[luciannoaramalho]

Hi all. I have a FortiAP on my network and I want that hosts that stablished connection with it, recieve internal IP address from my internal DHCP server. My DHCP server is a windows2008. I try use DHCP relay for VAP Interface on system->network, but not works. Thanks.

[FortiGeek]

Check that the interface the FortiAPs are on has DHCP Server set to Relay and Option code set to 138. Also it' s worth checking that the Fortigate is on a special build6390 and the FortiAP as the latest firmware updated to b0112

[#3]

I don' t believe this is possible. Back in September I worked with Koroush Saraf (Fortinet' s leader for the FortiAP' s) to create a similar setup. But we could never figure out how to get it to work. I ended up scrapping the idea....but I' m very interested in making this work.... Have you been able to complete your configuration successfully?

[ibm_ioman]

I also have an issue in this area. We are giving internet access to our guests trough ethernet cable, from a switch connected on port1 of a FG110C. Now we have some FortiAPs and want to give access also on wireless, but we would like to give them IPs from the same range as ethernet connection. (with normal, blind APs from other vendors, connected in port1, is not a problem to do this) So far I understand is not possible, because FortiAPs are combined in a virtual interface, which needs an IP, different, of course, from the one on port1. Still, would it be possible to set a relay dhcp server or something on VAP interface to the dhcp server on port1?

[wmiller]

ibm_ioman

ibm_ioman How are you making out with the 110c and the FAP as far as dhcp relay?

[ibm_ioman]

I gave up using dhcp relay. I have set up a dhcp server on VAP interface and changed users' IP addresses. So, now, users that are using ethernet connection are in a range, and wireless users are on different range. Seems ok so far, still, dhcp relay would be nicely.

[wmiller]

Well by the 3-23 of this month they were supposed to have the Bridging feature present to bridge the wireless to the LAN. This is the sole purpose I purchased the FAP for. I specifically asked this question before purchasing. I thought the the way to config this was using DHCP relay but fortinet says NO, this is not how to do it. Bridging is how you need to do it and the feature isnt present yet. All I am looking for is my network which has a sever 2003r2 DHCP server on 10.0.0.0 network serving 10.0.0.100-254 on my lan. I would like my Ipads and laptops to get 10.0.0.X addresses without having to make a bunch of other configuration which adds to the load of the firewall. For the floor plan of my building I will need a total of 2 FAP to get full coverage and I use a 110C on V4 MR3. It just seems odd to me there are 2 main purposes for wireless other than the 1000 reasons one could give. Full Blown Wireless Routed/Segmented or Bridged. I am only ASSuming that the segmented and bridge configs would be 50/50. I am not sure why this came out with no bridging ????

[FLSSRC]

I also need to bridge traffic from a Guest-Wireless VAP to a DSL circuit which provides dhcp to the clients. Has this been added to v4, MR3, build 0441? Can I upgrade from v4.0, MR2, Patch2, build 6390 to v4, MR3, build 0441?

[wmiller]

There is No Bridging at this time. This is the single most anticipated feature that people are waiting on.

[Carl_Wallmark]

there is one way to do this, and that is to put the FortiAP in a transparent vdom, but then the wireless configuration will be much more complex, as you can understand.