FortiGate で DHCP サーバ機能を設定する方法（v6.2.6）

FW02 (server) # show
config system dhcp server
    edit 1
        set dns-service default
        set default-gateway 192.168.1.100
        set netmask 255.255.255.0
        set interface "internal1"
        config ip-range
            edit 1
                set start-ip 192.168.1.1
                set end-ip 192.168.1.99
            next
            edit 2
                set start-ip 192.168.1.101
                set end-ip 192.168.1.254
            next
        end
    next
end

FW02 (server) # show full-configuration
config system dhcp server
    edit 1
        set status enable
        set lease-time 604800
        set mac-acl-default-action assign
        set forticlient-on-net-status enable
        set dns-service default
        set wifi-ac-service specify
        set wifi-ac1 0.0.0.0
        set wifi-ac2 0.0.0.0
        set wifi-ac3 0.0.0.0
        set ntp-service specify
        set domain ''
        set wins-server1 0.0.0.0
        set wins-server2 0.0.0.0
        set default-gateway 192.168.1.100
        set next-server 0.0.0.0
        set netmask 255.255.255.0
        set interface "internal1"
        config ip-range
            edit 1
                set start-ip 192.168.1.1
                set end-ip 192.168.1.99
            next
            edit 2
                set start-ip 192.168.1.101
                set end-ip 192.168.1.254
            next
        end
        set timezone-option disable
        set filename ''
        set server-type regular
        set conflicted-ip-timeout 1800
        set auto-configuration enable
        set ddns-update disable
        set vci-match disable
        set ntp-server1 0.0.0.0
        set ntp-server2 0.0.0.0
        set ntp-server3 0.0.0.0
    next
end

FW02 (1) # set
status                       Enable/disable this DHCP configuration.
lease-time                   Lease time in seconds, 0 means unlimited.
mac-acl-default-action       MAC access control default action (allow or block assigning IP settings).
forticlient-on-net-status    Enable/disable FortiClient-On-Net service for this DHCP server.
dns-service                  Options for assigning DNS servers to DHCP clients.
wifi-ac-service              Options for assigning WiFi Access Controllers to DHCP clients
wifi-ac1                     WiFi Access Controller 1 IP address (DHCP option 138, RFC 5417).
wifi-ac2                     WiFi Access Controller 2 IP address (DHCP option 138, RFC 5417).
wifi-ac3                     WiFi Access Controller 3 IP address (DHCP option 138, RFC 5417).
ntp-service                  Options for assigning Network Time Protocol (NTP) servers to DHCP clients.
ntp-server1                  NTP server 1.
ntp-server2                  NTP server 2.
ntp-server3                  NTP server 3.
domain                       Domain name suffix for the IP addresses that the DHCP server assigns to clients.
wins-server1                 WINS server 1.
wins-server2                 WINS server 2.
default-gateway              Default gateway IP address assigned by the DHCP server.
next-server                  IP address of a server (for example, a TFTP sever) that DHCP clients can download a boot file from.
*netmask                      Netmask assigned by the DHCP server.
*interface                    DHCP server can assign IP configurations to clients connected to this interface.
timezone-option              Options for the DHCP server to set the client's time zone.
tftp-server                  One or more hostnames or IP addresses of the TFTP servers in quotes separated by spaces.
filename                     Name of the boot file on the TFTP server.
server-type                  DHCP server can be a normal DHCP server or an IPsec DHCP server.
conflicted-ip-timeout        Time in seconds to wait after a conflicted IP address is removed from the DHCP range before it can be reused.
auto-configuration           Enable/disable auto configuration.
ddns-update                  Enable/disable DDNS update for DHCP.
vci-match                    Enable/disable vendor class identifier (VCI) matching. When enabled only DHCP requests with a matching VCI are served.

FW02 (1) # set dns-service
local      IP address of the interface the DHCP server is added to becomes the client's DNS server IP address.
default    Clients are assigned the FortiGate's configured DNS servers.
specify    Specify up to 3 DNS servers in the DHCP server configuration.

FW # execute dhcp lease-list
internal
  IP                    MAC-Address             Hostname                VCI                     Expiry
  192.168.1.110         1c:c0:35:03:54:68       hogePC                  MSFT 5.0                Sun Sep 13 08:10:40 2020

FW # execute dhcp lease-clear all

FW # execute dhcp lease-clear 192.168.1.110

config system dhcp server
    edit N
        set dns-service specify
        set dns-server1 10.1.10.1
        set dns-server2 10.1.10.2
        set dns-server3 10.1.10.3
        set dns-server4 0.0.0.0
    next
end