Hi together,
after updating my 60E FortiOS to 5.6.3 no DHCP Server under Network / Edit Interface is shown.
At "internal" Network it is shown - but not at additonal Network "dmz".
Configuring whithin CLI is working w/o any problem - but it is not shown in GUI.
Thanks
Greets
Robert
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
When configuring the interface in the GUI there's an option to select it's role (LAN/WAN/DMZ/Undefined).
If you select WAN or DMZ then it won't let you configure the DHCP via the GUI. Change the DMZ interface's role to LAN and you should see the DHCP option available.
Welcome to the forums.
2 questions:
1) What did you upgrade from & did you follow the upgrade path? (see http://cookbook.fortinet.com/sysadmins-notebook/supported-upgrade-paths-fortios/)
2) Did you test multiple browsers and/or clear the cache?
Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com
Hi Bob,
thanks for your answer - yes I followed the cookbook - the prev Version was the 5.4 and btw. the IPsec VPN was not imported as mentioned in the upgrade-path. All other funtions are working properly.
I tested two exporers (firefox / ie) both almost the current version.
Robert
When configuring the interface in the GUI there's an option to select it's role (LAN/WAN/DMZ/Undefined).
If you select WAN or DMZ then it won't let you configure the DHCP via the GUI. Change the DMZ interface's role to LAN and you should see the DHCP option available.
Hi,
thanks for your reply. You are right - when changing to LAN there is DHCP available.
But why did change Fortinet the behaviour of DMZ interfaces after Version 6.4 without any Notice? Unknownable!
Is there any other restriction between DMZ and LAN interface type? I did not find anything about the difference.
Thanks in advice.
Robert
There's no real difference, it's just what you can configure in the GUI for the interfaces. I think it's mainly used for the self auditing feature in 5.6. DMZ interfaces have different rules that apply to the checks than LAN ones.
As neonbit explained you can always set interfaces back to "Undefined" to have all options. They didn't remove that option.
Can anyone help ??
After doing the upgrade, the 'DHCP monitor'(under monitor section) it keeps loading. same also happening in VPN section as well. The pages are just loading.
I tried to access the GUI with other web browsers as well but I am facing the same issue.
Thanks
Hi Aaqib.
What model of Fortigate and firmware version were you upgrading from and to which firmware to? Have you followed the firmware upgrade path (https://docs2.fortinet.com/upgrade-tool)?
Usually some objects/settings break if you do not follow the upgrade path and/or on top of this some of the conversion scripts used in the upgrade process will convert certain settings that may no longer be supported on new firmware or converts some settings to defaults.
If your foritgate stores config revisions, I suggest comparing the current config vs the old config and see if what's changed or use a text compare tool.
That said, performs perform a exec dhcp lease-list from the CLI and see if anything shows up. If need be, perhaps purge the DHCP leases (e.g. exec dhcp lease-clear all ).
NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
neobit's answer worked perfect for me!
Thank you,
Robert
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1640 | |
1069 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.