Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mazu74
New Contributor

Created on ‎08-14-2014 04:00 AM

VPN IPSec and DHCP relay

Hi, Is it possible obtain IP address from Windows DHCP Server of my LAN for my VPN IPSec clients ? Relay DHCP in Fortigate 90 D only for VPN IPSec clients ? Thanks
7626
0 Kudos
4 REPLIES 4
Carl_Wallmark
Valued Contributor

Created on ‎08-14-2014 05:21 AM

Hi, Yes its possible, Assuming FortiOS 5.0.x: 1. Edit your dialup ipsec interface under network. 2. Check the DHCP server 3. Change Mode to " Relay" 4. Change Type to " IPSEC" 5. Enter the IP address of the dhcp server.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
1309
0 Kudos
mazu74
New Contributor

Created on ‎08-14-2014 06:32 AM

Thanks. FortiOs v5.2.0,build0589. My tunnel is a Tunnel Mode not an Interface Mode and i don' t see dialup ipsec interface under network.
1309
0 Kudos
Carl_Wallmark
Valued Contributor

Created on ‎08-14-2014 07:21 AM

In that case I would try to change from Policy Mode to Interface Mode. Interface Mode is better in all cases.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
1309
0 Kudos
mazu74
New Contributor

Created on ‎08-14-2014 08:10 AM

Ok but why this : (if clients obtain IP with my DHCP Server) config vpn l2tp set eip XXX.XXX.XXX.20 set sip XXX.XXX.XXX.10 set status enable set usrgrp " VPN GROUP" end eip and sip are unnecessary. ???
1309
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.