Скачать или смотреть Configure Fortigate for Internal Clients with DHCP + NAT

In this Fortigate tutorial, we walk through the complete process of configuring port2 with a static IP, enabling DHCP for client devices, and allowing internet access for connected Windows machines.

We also explore how to assign the interface to a VDOM, configure SNMP, disable VCI matching for broader DHCP compatibility, and enable full traffic logging on the firewall policy.

🔧 Commands Used in This Video:
Show current port2 interface settings
show system interface port2

Assign port2 to the root VDOM and set SNMP index
config system interface
edit "port2"
set vdom "root"
set snmp-index 2
set ip 172.22.2.1 255.255.255.0
set allowaccess ping
set alias "Port2-172.22"
next
end

Configure DHCP server on port2
config system dhcp server
edit 1
set lease-time 86400
set dns-service default
set ntp-service local
set default-gateway 172.22.2.1
set netmask 255.255.255.0
set interface "port2"
config ip-range
edit 1
set start-ip 172.22.2.100
set end-ip 172.22.2.200
next
end
next
end

Disable VCI Matching to allow non-Forti devices to receive DHCP
config system dhcp server
edit 1
unset vci-match
end



This config allows devices on port2 (e.g., Windows machines) to get IPs via DHCP and reach the internet through port1, while logging all traffic.

#Fortigate #Fortinet #FirewallConfiguration #FortigateTutorial #FortigateDHCP #FortigateNAT #NetworkSecurity #CyberSecurity #DHCPServer #NATConfiguration #ITLab #FortigateSetup #FirewallRules #FortigateTraining #InternalNetwork #InternetAccess #NetworkLab #FortigateFirewall #TechTutorial #NetworkingBasics