Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor II

fortigate communication to dhcp relay

hi, I am implementing dhcp relay on fortigate to my windows server virtual machine.

Fortigate is a gateway for user vlans (e.g. vlan 100) and is a gateway for server vlans (e.g. vlan 101)

in the vlan 100 configuration, I have windows server indicated as dhcp relay. however, I wonder if I need to tag vlan 100 to the windows server virtual machine?

How does fortigate forward dhcp request from cliet to windows server? is it done through policies since fortigate is a gateway for user and server vlans? does fortigate see that the relay address is its connected network, or does the gateway of user vlan forward the dhcp request from vlan 100 to 101?

I wonder if I need to add all user vlans as tagged to the windows server?

Zrzut ekranu 2024-02-01 210222.jpg



DHCP relaying is not like any traffic, it doesn't need any firewall policy, because when FG receives the DHCP request from clients, actually FG generate a new DHCP request and sends it to server.

The new DHCP request is sent by FG to DHCP server via the route that is indicated by FG's routing table. In your case the route is connected.

You don't need to add tagged VLAN 100 to your Windows server, since the DHCP relay does all the required job.

To check DHCP relay config (if needed), just see below link, go to section "DHCP relay".


Honored Contributor

yes and this is because DHCP is basically UDP broadcast traffic which is not routeable.


"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

-- "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
Top Kudoed Authors