NAT Network interface for DHCP Relay forard

[herve_s]

Hello,

On Fortigate 60F version 6.4.11, I would like to activate DHCP IP Relay on network interface.

But I would like that source network interface be natted.

Visibly these forward to IP relay don't go through Policy Firewall, so not possibility to NAT by this way.

Do you know if it's possible to do it ?

Thanks in advance

Regards

[Julien87]

Hi Hervé,

The request is send by the Interface directly connected in the out interface.

I cannot understand why you have need nat? have you a schema or detailled information?

you can show a schema in this link.  (just for the schema )

https://community.fortinet.com/t5/FortiGate/Technical-Note-Configuration-of-a-DHCP-server-with-multi... 

Best regards,

[herve_s]

Hello Julien,

Thank you for your information. It's exactly same situation that your schema but our internal network in my case is not routed, so not known by DHCP server. So when it send OFFER, it doesn't work of course. So, I need that IP@ relay (source address seen by DHCP server) be WAN interface address (NAT).

I saw that I didn't activate dhcp service with ip dhcp server address on WAN interface (like indicated on your doc). But even if, I think it won't work either ?

Regards

Hervé 

[sw2090]

basically DHCP is udp broadcast so within a subnet it works without relaying. You only need to relay (i.e. in this case proxy) it if your dhcp server and clients are on different subnets and/or vlans/interfaces.

DHCP and DHCP relaying on a FGT are done per interface while NAT is done per Policy.

I cannot specify it anymore without more details though.