Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • User Guide

    Home FortiPortal 6.0.5 User Guide
    6.0.5
    7.4.1
    7.4.0
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.0.15
    6.0.14
    6.0.13
    6.0.12
    6.0.11
    6.0.10
    6.0.9
    6.0.8
    6.0.7
    6.0.6
    6.0.5
    6.0.4
    6.0.3
    6.0.2
    6.0.1
    6.0.0
    5.3.8
    5.3.7
    5.3.6
    5.3.5
    5.3.4
    5.3.3
    5.3.2
    5.3.0
    5.2.0
    4.1.0

    DHCP Server

    DHCP Server

    You can add, update, and delete DHCP servers.

    Adding a DHCP server

    1. Select DHCP Server from the System dropdown menu.
    2. Right-click in the DHCP Server section of the table and select Create New.
    3. Enter values in the relevant fields. See DHCP server fields.
    4. Select Save.

    Updating a DHCP server

    1. Select DHCP Server from the System dropdown menu.
    2. Right-click a DHCP server and select Edit.
    3. Update the values that you want to change.
    4. Select Save.

    Deleting a DHCP server

    1. Select DHCP Server from the System dropdown menu.
    2. Right-click a DHCP server and select Delete.
    3. Select Yes in the confirmation dialog box to delete the selected DHCP server.

    DHCP server fields

    The Create New DHCP Server and Edit DHCP Server dialogs contain the following fields:

    Settings

    Guidelines

    Interface

    The name of the interface.

    Mode

    Select Server to create a DHCP server.

    Enable

    Select this option to make the DHCP server active.

    Type

    Select Regular to use the DHCP in regular mode. Select IPsec to use the DHCP in IPsec mode.

    IP Range

    DHCP IP address range. The IP range of each DHCP server must match the network address range. See Configure an IP range.

    Network Mask

    Required. Netmask assigned by the DHCP server.

    Default Gateway

    Required. Default gateway IP address assigned by the DHCP server.

    Next Server

    Required. IP address of a server (for example, a TFTP sever) that DHCP clients can download a boot file from.

    DNS Service

    Options for assigning DNS servers to DHCP clients:

    Use System DNS Setting (Default)—Clients are assigned the FortiGate deviceʼs configured DNS servers.

    Specify—Specify up to three DNS servers in the DHCP server configuration.

    Same as interface IP (Local)—The IP address of the interface the DHCP server is added to becomes the clientʼs DNS server IP address.

    DNS Service0

    DNS server 1.

    DNS Service1

    DNS server 2.

    DNS Service2

    DNS server 3.

    NTP Service

    Options for assigning Network Time Protocol (NTP) servers to DHCP clients:

    Use System NTP Setting—The IP address of the interface the DHCP server is added to becomes the clientʼs NTP server IP address.

    Specify—Specify up to three NTP servers in the DHCP server configuration.

    Use FortiGate as NTP Server—Clients are assigned the FortiGate deviceʼs configured NTP servers.

    NTP Service0

    NTP server 1.

    NTP Service1

    NTP server 2.

    NTP Service2

    NTP server 3.

    FortiClient On-Net Status

    Select this option to require all clients to have FortiClient installed in order to get access through the FortiGate.

    Timezone Option

    Options for the DHCP server to set the clientʼs time zone.

    Disable—Do not set the clientʼs time zone.

    Default—Clients are assigned the FortiGate deviceʼs configured time zone.

    Specify—Specify the time zone to be assigned to DHCP clients. If you select Specify, enter the two-digit code that corresponds to the appropriate time zone in the Timezone field.

    MAC Address Access Control List

    A MAC Address Access Control List (ACL) allows or blocks access on a network interface that includes a DHCP server. See Configure an MAC address access control list.
    Configure an IP range
    1. Right-click in the IP Range table and select Create New.
    2. In the Start IP field, enter the IPv4 address at the start of the IP address range.
    3. In the End IP field, enter the IPv4 address at the end of the IP address range.
    4. To add a DHCP option, under Advanced Options, enter the option number in the ID field .

      The option number and value must be configured on the DHCP server.
    5. Select Yes to save the IP range.
    Configure an MAC address access control list
    1. Right-click in the MAC Address Access Control List table and select Create New.
    2. In the IP field, enter an IP address to allow or block.
    3. In the MAC field, enter a MAC address to allow or block.
    4. Select Assign to allow the IP address and MAC address, select Block to block the IP address and MAC address, or select Reserved to prevent the IP address and MAC address from being used in any rules.
    5. In the Description field, enter an optional description of the MAC address access control list.
    6. To add a DHCP option, under Advanced Options, enter the option number in the ID field.

      The option number and value must be configured on the DHCP server.
    7. Select Yes to save the MAC address access control list.
    Previous
    Next

    DHCP Server

    DHCP Server

    You can add, update, and delete DHCP servers.

    Adding a DHCP server

    1. Select DHCP Server from the System dropdown menu.
    2. Right-click in the DHCP Server section of the table and select Create New.
    3. Enter values in the relevant fields. See DHCP server fields.
    4. Select Save.

    Updating a DHCP server

    1. Select DHCP Server from the System dropdown menu.
    2. Right-click a DHCP server and select Edit.
    3. Update the values that you want to change.
    4. Select Save.

    Deleting a DHCP server

    1. Select DHCP Server from the System dropdown menu.
    2. Right-click a DHCP server and select Delete.
    3. Select Yes in the confirmation dialog box to delete the selected DHCP server.

    DHCP server fields

    The Create New DHCP Server and Edit DHCP Server dialogs contain the following fields:

    Settings

    Guidelines

    Interface

    The name of the interface.

    Mode

    Select Server to create a DHCP server.

    Enable

    Select this option to make the DHCP server active.

    Type

    Select Regular to use the DHCP in regular mode. Select IPsec to use the DHCP in IPsec mode.

    IP Range

    DHCP IP address range. The IP range of each DHCP server must match the network address range. See Configure an IP range.

    Network Mask

    Required. Netmask assigned by the DHCP server.

    Default Gateway

    Required. Default gateway IP address assigned by the DHCP server.

    Next Server

    Required. IP address of a server (for example, a TFTP sever) that DHCP clients can download a boot file from.

    DNS Service

    Options for assigning DNS servers to DHCP clients:

    Use System DNS Setting (Default)—Clients are assigned the FortiGate deviceʼs configured DNS servers.

    Specify—Specify up to three DNS servers in the DHCP server configuration.

    Same as interface IP (Local)—The IP address of the interface the DHCP server is added to becomes the clientʼs DNS server IP address.

    DNS Service0

    DNS server 1.

    DNS Service1

    DNS server 2.

    DNS Service2

    DNS server 3.

    NTP Service

    Options for assigning Network Time Protocol (NTP) servers to DHCP clients:

    Use System NTP Setting—The IP address of the interface the DHCP server is added to becomes the clientʼs NTP server IP address.

    Specify—Specify up to three NTP servers in the DHCP server configuration.

    Use FortiGate as NTP Server—Clients are assigned the FortiGate deviceʼs configured NTP servers.

    NTP Service0

    NTP server 1.

    NTP Service1

    NTP server 2.

    NTP Service2

    NTP server 3.

    FortiClient On-Net Status

    Select this option to require all clients to have FortiClient installed in order to get access through the FortiGate.

    Timezone Option

    Options for the DHCP server to set the clientʼs time zone.

    Disable—Do not set the clientʼs time zone.

    Default—Clients are assigned the FortiGate deviceʼs configured time zone.

    Specify—Specify the time zone to be assigned to DHCP clients. If you select Specify, enter the two-digit code that corresponds to the appropriate time zone in the Timezone field.

    MAC Address Access Control List

    A MAC Address Access Control List (ACL) allows or blocks access on a network interface that includes a DHCP server. See Configure an MAC address access control list.
    Configure an IP range
    1. Right-click in the IP Range table and select Create New.
    2. In the Start IP field, enter the IPv4 address at the start of the IP address range.
    3. In the End IP field, enter the IPv4 address at the end of the IP address range.
    4. To add a DHCP option, under Advanced Options, enter the option number in the ID field .

      The option number and value must be configured on the DHCP server.
    5. Select Yes to save the IP range.
    Configure an MAC address access control list
    1. Right-click in the MAC Address Access Control List table and select Create New.
    2. In the IP field, enter an IP address to allow or block.
    3. In the MAC field, enter a MAC address to allow or block.
    4. Select Assign to allow the IP address and MAC address, select Block to block the IP address and MAC address, or select Reserved to prevent the IP address and MAC address from being used in any rules.
    5. In the Description field, enter an optional description of the MAC address access control list.
    6. To add a DHCP option, under Advanced Options, enter the option number in the ID field.

      The option number and value must be configured on the DHCP server.
    7. Select Yes to save the MAC address access control list.
    Previous
    Next