Fortinet FortiGate 400, Installation & Configuration Manual, Page: 147 / 308

Network configuration Providing DHCP services to your internal network
FortiGate-400 Installation and Configuration Guide
147
Providing DHCP services to your internal network
If the FortiGate unit is operating in NAT/Route mode, you can use the CLI command
set system dhcpserver
to configure the FortiGate unit to be the DHCP server for
your internal network. Table 2 describes the syntax for the
set system
dhcpserver
command.
‘
Table 2:
set system dhcpserver
command syntax
Keywords Description
defaultroute
<gateway_ip>
The default route to be assigned to DHCP clients. The
defaultroute
,
exclusionrange
,
iprange
, and
reserve
IP addresses must all be on the same subnet as the internal
interface.
dns <dns_ip>
[<dns_ip>] [<dns_ip>]
The IP addresses of up to 3 DNS servers that the DHCP clients
can use for looking up domain names. Use a space to separate
the IP addresses. To remove a DNS IP, set the IP to 0.0.0.0.
domain <domain_str>
The domain name that the DHCP server assigns to the DHCP
clients.
exclusionrange
{<start1_ip-end1_ip>
| none}
[{<start2_ip-end2_ip>
| none}]
[{<start3_ip-end3_ip>
| none}]
[{<start4_ip-end4_ip>
| none}]
Enter up to 4 exclusion ranges of IP addresses within the
starting IP and ending IP addresses that cannot be assigned to
DHCP clients. Separate the IP addresses in the range with a
dash (
-
). Do not add spaces. Use a space to separate ranges.
The
defaultroute
,
exclusionrange
,
iprange
, and
reserve
IP addresses must all be on the same subnet as the
internal interface.
To change an exclusion range you must redefine all of the
exclusion ranges. To remove all exclusion ranges, replace the
first exclusion range with
none
.
iprange
<start_ip-end_ip>
The starting IP and the ending IP for the range of IP addresses
that the FortiGate unit can assign to DHCP clients. The
defaultroute
,
exclusionrange
,
iprange
, and
reserve
IP addresses must all be on the same subnet as the internal
interface.
leaseduration
<lease_int>
The interval in seconds after which a DHCP client must ask the
DHCP server for a new address. The lease duration must be
between 300 and 8000000 seconds.
netmask <netmask_ip>
The Netmask that the FortiGate DHCP server assigns to the
DHCP clients.
reserve <reserve_ip>
<reserve_mac>
[<name_str> | none]
Reserve an IP address so that the FortiGate DHCP server
always assigns this IP address to the device with the specified
MAC address. Optionally specify a name for the IP and MAC
address pair. The reserved IP cannot be assigned to any other
device. You can only add a given IP address or MAC address
once. The
defaultroute
,
exclusionrange
,
iprange
, and
reserve
IP addresses must all be on the same subnet as the
internal interface.
status
{enable | disable}
Enable or disable the FortiGate DHCP server for your internal
network.
winsserver
{<server1_ip> | none}
[{<server2_ip> |
none}]
Enter one or two WINS server IP addresses that are assigned
to DHCP clients.