AnsweredHot!To display dhcp server config

Author
Luc
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Status: offline
2020/05/17 22:59:51 (permalink)
0

To display dhcp server config

Hi all,
I am trying to display dhcp server config on 30e but i am not sure this gives code 5 error? Any idea?
# show ?
<Enter>
Or
full-configuration show full configuration
# show full-configuration system dns
Command fail. Return code 5
 
Secondly I want to do debugging on dhcp server traffic to see what is wrong....Any workaround?
 
Thanks help
#1
emnoc
Expert Member
  • Total Posts : 5622
  • Scores: 357
  • Reward points: 0
  • Joined: 2008/03/20 13:30:33
  • Location: AUSTIN TX AREA
  • Status: offline
Re: To display dhcp server config 2020/05/18 00:59:48 (permalink) ☼ Best Answerby Luc 2020/05/18 06:15:24
0
For dhcp you need to use "show full-configuration system dhcp server"
 
Ken Felix

PCNSE 
NSE 
StrongSwan  
#2
Luc
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Status: offline
Re: To display dhcp server config 2020/05/18 06:15:50 (permalink)
0
It gives the following error?
# show full-configuration system dhcp server
Command fail. Return code 5
#3
sw2090
Platinum Member
  • Total Posts : 594
  • Scores: 39
  • Reward points: 0
  • Joined: 2017/06/14 01:27:25
  • Location: Regensburg
  • Status: offline
Re: To display dhcp server config 2020/05/19 05:14:52 (permalink)
0
if you want to see the leases your dhcp has handed over:
 
exec dhcp lease list
 
to clear leases
 
exec dhcp lease clear
#4
sw2090
Platinum Member
  • Total Posts : 594
  • Scores: 39
  • Reward points: 0
  • Joined: 2017/06/14 01:27:25
  • Location: Regensburg
  • Status: offline
Re: To display dhcp server config 2020/05/19 05:16:01 (permalink)
0
maybe this is easier
 
config system dhcp server
show
 
will show all configured dhcp servers
 
The crux is that in FGT web gui this is part of interface config while on gui it is stand alone...
 
#5
Luc
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Status: offline
Re: To display dhcp server config 2020/05/19 05:24:16 (permalink)
0
Thanks reply..
Actual issue investigated is that clients are not getting IP addresses from the Fortigate device? What troubleshooting and workaround should be?  Where to start troubleshooting?
#6
sw2090
Platinum Member
  • Total Posts : 594
  • Scores: 39
  • Reward points: 0
  • Joined: 2017/06/14 01:27:25
  • Location: Regensburg
  • Status: offline
Re: To display dhcp server config 2020/05/19 05:43:50 (permalink)
0
use flow debug or/and packet sniffer to see the actual traffic and whalt happens to it.
 
#7
Luc
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Status: offline
Re: To display dhcp server config 2020/05/19 05:45:52 (permalink)
0
I am not good on fortigate...Can you give actual command set? for the flow debug or/and packet sniffer?
#8
sw2090
Platinum Member
  • Total Posts : 594
  • Scores: 39
  • Reward points: 0
  • Joined: 2017/06/14 01:27:25
  • Location: Regensburg
  • Status: offline
Re: To display dhcp server config 2020/05/19 06:47:59 (permalink)
0
I just gave it in this thread: https://forum.fortinet.co...m=184147&tree=true
#9
emnoc
Expert Member
  • Total Posts : 5622
  • Scores: 357
  • Reward points: 0
  • Joined: 2008/03/20 13:30:33
  • Location: AUSTIN TX AREA
  • Status: offline
Re: To display dhcp server config 2020/05/19 08:22:48 (permalink)
0
What is your admin access-profile level? You might not be of the right level in order to execute those commands
 
Ken Felix

PCNSE 
NSE 
StrongSwan  
#10
Dave Hall
Expert Member
  • Total Posts : 1673
  • Scores: 174
  • Reward points: 0
  • Joined: 2012/05/11 07:55:58
  • Location: Canada
  • Status: online
Re: To display dhcp server config 2020/05/19 13:50:15 (permalink)
0
Depending whether or not you are on site or trying to remote troubleshoot from afar.
 
If you have access to he GUI, I would check the internal (or LAN) interface to see if the DHCP server is enabled.  Next, check the "Device Detection" option on the same interface.  Using the DHCP monitor (under monitor) and compare that against the detected "User & Device->Device Inventory" list - this is one way to detect rogue or statically assigned devices. 
 
From the CLI, type get system arp will provide a list of detected devices - this list may be similar to what is reported from the device inventory list. 
 
If DHCP is enabled (on the internal interface) have someone direct connect a laptop to one of internal ports and see if they get an IP.  If not, remove all cables from the internal ports and reboot the 30E - direct connect the laptop again and see if it gets an IP then.  If so then I would suspect a network loop and/or rogue (DHCP) device somewhere on the network.
 
Luc
Thanks reply..
Actual issue investigated is that clients are not getting IP addresses from the Fortigate device? What troubleshooting and workaround should be?  Where to start troubleshooting?





NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
#11
Jump to:
© 2020 APG vNext Commercial Version 5.5