Support DHCP client mode for inter-VDOM links 7.4.1
This information is also available in the FortiOS 7.4 Administration Guide: |
The inter-VDOM link is capable of acquiring an IP address from the DHCP server, which allows for more seamless network integration.
Example
The following example is based on the configuration in FortiGate LAN extension, and assumes that the FortiGate connector, FortiGate access controller, interfaces, VDOMs, DHCP server, and firewall policies have already been configured. |
In this example, the lan-ext VDOM was created on the FortiGate connector and is a lan-extension
type. This configuration allows the VDOM to function as a FortiExtender in LAN extension mode. However, this configuration results in the loss of FortiGate security features on that VDOM. For users who wish to use the FortiGate security features locally on the FortiGate connector, another VDOM (such as the root VDOM) can be used. Once the DHCP server is enabled on the FortiGate controller, an inter-VDOM link belonging to another VDOM (in this case, the root VDOM) can receive an IP address by DHCP from the FortiGate controller.
To configure the inter-VDOM link:
-
Add the VDOM link with an Ethernet type:
config system vdom-link edit "lan_ext" set type ethernet next end
-
Configure the VDOM link interfaces:
config system interface edit "lan_ext0" set vdom "lan-ext" set role lan next edit "lan_ext1" set vdom "root" set mode dhcp next end
-
Verify that the lan_ext1 interface obtained an IP address from FortiGate access controller:
# diagnose ip address list | grep lan_ext1 IP=9.9.9.100->9.9.9.100/255.255.255.0 index=27 devname=lan_ext1