Fortigate with DHCP using Windows Server 2012 DHCP Failover

[dmatta]

Hi All,

i have a scenario where to protect my server farm i have a fortigate cluster, behind the fws i have my DHCP servers with win 2012 dhcp failover (hot standby).

Now all my sites are pointing with a relay to the broadcast of the dhcp lan as microsoft suggest for this kind of design, but the firewall is dropping all the request.

Does anyone have this kind of design? Any suggestion to solve it?

I was thinking to keep the relay pointing the ip of one of the server and then NAT it to the broadcast, but it sounds like a really cr@@y wa.

Thanks

[ashukla_FTNT]

You need to configure dhcp relay in firewall otherwise firewall will always drop broadcast packets.

You can configure upto 8 dhcp relay ips so in you case configure both server's ip.

example:

config system interface edit <name of interface which is reciving dhcp requests> set dhcp-relay-ip 1.1.1.1 2.2.2.2 3.3.3.3

set dhcp-relay-service enable

set dhcp-relay-type regular end