How to enable the DHCP rouge server notification on a FortiGate

[Matteo]

Hi,

I'm wondering if the fortigate unit is able to understand that there could be a DHCP rouge server, for example by sending a warning/error message. I enabled the DHCP server feature on many fortigate interfaces (FortiGate 100D).

In fact some weeks ago a user installed a DHCP rouge server for testing on his machine, and that server caused some issue.

Many thanks

[FortiOSman]

Greetings Matteo,

'DHCP Snooping' is the term you are looking for. This feature is enabled at the switch level, not at the firewall. Enabling it and configuring SNMP traps for alerting will do what you want.

https://en.wikipedia.org/wiki/DHCP_snooping

-FortiOSman

Up, Up, and Away!

[Matteo]

Many thanks FortiOSman! I didn't know the feature name (DHCP snooping), and it's exactly what I was looking for. I hoped it could be enabled at fortigate level ...

Thanks!