Transparent mode - how to allow DHCP from router?

[#1]

Hello, I am a new owner, my network is very simple internet > router > fortigate 50b > switch > PCs My router (dlink) is acting as DHCP server The problem that I have is that when a PC is turned on, it tries to get a new IP address from the router, but the firewall blocks the connection, so it can' t get a new ip. of course it can if I set a static IP address For now I have solved with this rule: from any to any, source all destination all, DHCP service ACCEPT but I' m wondering if this might cause security issues? is there maybe a better way to set this? thanks

[rwpatterson]

Your solution would be a DHCP helper. Under DHCP, you tell the FGT where to send requests received on the internal port. Just send them the the DLink IP address. No policies needed. NOTE: I know this works in NAT/Route mode. Not sure of transparent. Give it a whirl.

[#3]

Under D

I really appreciate your answer, it sounds logic but I' m confused because you said " no policies" ... then where should I set such thing?

[SECCON1MC]

DHCP relay is only for layer3 (Nat/Route mode). The configuration you have to allow DHCP is correct. from internal to wan1 allow DHCP

[rwpatterson]

ORIGINAL: SECCON1MC DHCP relay is only for layer3 (Nat/Route mode). The configuration you have to allow DHCP is correct. from internal to wan1 allow DHCP

...need caffeine...

[#6]

i tried that, it doesn' t work (internal -> wan) the only thing that works is any to any..... don' t ask me why