Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
che9992
New Contributor

.

.

32 REPLIES 32
Toshi_Esumi
SuperUser
SuperUser

What config do you have under "sh sys dhcp server" in CLI at the FG100D?

che9992

.

Toshi_Esumi

I wanted to see like below to verify what you have the GW and mask as well as reserved IP config:

(below includes bogus MAC addresses)

config system dhcp server
edit 1
        set dns-service default
        set default-gateway 192.168.1.99
        set netmask 255.255.255.0
        set interface "internal"
config ip-range
edit 1
set start-ip 192.168.1.100
set end-ip 192.168.1.254
next
end
config reserved-address
edit 1
set ip 192.168.1.1
set mac 00:00:00:00:00:01
next
edit 2
set ip 192.168.1.2
set mac 00:00:00:00:00:02
next
---<snip>---
end
next
end
che9992

.

che9992

.

rwpatterson
Valued Contributor III

The attached code will give you a DHCP space for the entire class C range, but will exclude the entries 1-100 from being given out. The code was entered via the GUI on FOS v4.3.14 and copied from the backup. Change the name of the interface before using it in your firewall. Try the below:

 

config system dhcp server
    edit 0
        set auto-configuration disable
        set default-gateway 192.168.100.254
        set domain "test.domain.com"
            config exclude-range
                edit 1
                    set end-ip 192.168.100.100
                    set start-ip 192.168.100.1
                next
            end
        set interface "[insert interface name here]"
            config ip-range
                edit 1
                    set end-ip 192.168.100.254
                    set start-ip 192.168.100.1
                next
            end
        set netmask 255.255.255.0
        set dns-server1 8.8.8.8
        set dns-server2 8.8.4.4
    next
end

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
che9992

.

rwpatterson
Valued Contributor III

Yes, but you need to add your information. This is what your clients will receive along with their IP addresses.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
che9992

.

Labels
Top Kudoed Authors