How to set up your FortiWAN
Configuring Network Interface (Network Setting)
To implement the deployment, you need to enable DHCP Relay for each of the subnets (enable DHCP Relay on each
of the ports). In the example above, DHCP Relay is enabled on ports of LAN 1, LAN 2 and subnet in DMZ 1, and all the
DHCP requests received on the ports will be forwarded to the DHCP server in the subnet DMZ 2. A LAN port or DMZ
port with DHCP Relay being enabled on will forward the DHCP requests it received (coming from the subnet it
connects to) to the DHCP server.
DHCP Relay Server
IP address of the standalone DHCP server.
DHCP Relay Agent IP
The IP address of the DHCP Relay agent on the port. It indicates the
source of a relayed DHCP request to the DHCP server. This IP will be
contained in a relayed DHCP message, so that the DHCP server could
recognize the relay agent that the relayed DHCP request came from and
respond the corresponding IP address to the DHCP client (according to
this DHCP Relay Agent IP and the addressing policy).
The DHCP Relay Agent IP must be an IP address deployed on the
localhost of the LAN port or DMZ port. You might deploy multiple IP
addresses to a LAN port or a DMZ port (the field
IP(s) on Localhost
of
a LAN subnet, a subnet in DMZ or a subnet in WAN and DMZ), then any
of them could be took as the DHCP Relay Agent IP.
Next are the configurations of DHCP Relay on the LAN 1, LAN 2 and DMZ ports in the example above.
LAN 1 subnet
From the example above, we have configured the localhost of LAN 2 port with three IP addresses 192.168.10.1,
192.168.10.2 and 192.168.10.3 for subnet 192.168.10.0/24. To enable DHCP Relay on this port, you need to check
the check-box "Enable DHCP Relay" on the Web UI and configure the settings as follows:
DHCP Relay Server
10.10.10.10
DHCP Relay Agent IP
192.168.10.1, 192.168.10.2 or 192.168.10.3
The DHCP server (10.10.10.10) recognizes the relay agent (the LAN 1 port) that relayed the DHCP message through
the "DHCP Relay Agent IP" contained in the relayed message. Then according to the DHCP addressing policy, it
selects an IP belongs to 192.168.10.x from its IP pool and responds to the relay agent on LAN 1 port.
LAN 2 subnet
From the example above, we have configured the localhost of LAN 1 port with three IP addresses 192.168.11.254 and
192.168.11.253 for subnet 192.168.11.0/24. To enable DHCP Relay on this port, you need to check the check-box
"Enable DHCP Relay" on the Web UI and configure the settings as follows:
DHCP Relay Server
10.10.10.10
DHCP Relay Agent IP
192.168.11.254 or 192.168.11.253
58
FortiWAN Handbook
Fortinet Technologies Inc.
