Providing Dhcp Services To Your Internal Network - Fortinet FortiGate 100 Installation & Configuration Manual

Network configuration

Providing DHCP services to your internal network

FortiGate-100 Installation and Configuration Guide
The gateway added to a policy route must also be added to a destination route. When
the FortiGate unit matches packets with a route in the RPDB, the FortiGate unit looks
in the destination routing table for the gateway that was added to the policy route. If a
match is found, the FortiGate routes the packet using the matched destination route. If
a match is not found, the FortiGate routes the packet using normal routing.
To find a route with a matching gateway, the FortiGate unit starts at the top of the
destination routing table and searches until it finds the first matching destination route.
This matched route is used to route the packet.
Policy routing command syntax
Configure policy routing using the following CLI command.
set system route policy <route_int> src <source_ip>
<source_mask> iifname <source-interface_name>
dst <destination_ip> <destination_mask>
oifname <destination-interface_name> protocol <protocol_int>
port <low-port_int> <high-port_int> gw <gateway_ip>
Complete policy routing command syntax is described in the FortiGate CLI Reference
Guide.
If the FortiGate unit is operating in NAT/Route mode, you can configure it to be the
DHCP server for your internal network:
1 Go to System > Network > DHCP.
2 Select Enable DHCP.
3 Configure DHCP server settings.
Starting IP
Ending IP
Netmask
Lease Duration
Domain
DNS IP
Default Route
WINS
Exclusion Range Optionally enter up to 4 exclusion ranges of IP addresses within the starting
4 Select Apply.
5 Configure the IP network settings of the computers on your network to obtain an IP
address automatically using DHCP.
Enter Starting IP and Ending IP to configure the range of IP addresses that
the FortiGate unit can assign to DHCP clients. The addresses must be
addresses on your internal network.
Enter the Netmask that the FortiGate unit assigns to the DHCP clients.
Enter the interval in seconds after which a DHCP client must ask the DHCP
server for a new address. The lease duration must be between 300 and
8000000 seconds.
Optionally enter in the domain that the DHCP server assigns to the DHCP
clients.
Enter the IP addresses of up to 3 DNS servers that the DHCP clients can
use for looking up domain names.
Enter the default route to be assigned to DHCP clients. The default route
should be on the same subnet as the starting and ending IP addresses.
Add the IP addresses of one or two WINS servers to be assigned to DHCP
clients.
IP and ending IP addresses that cannot be assigned to DHCP clients.
Policy routing
119