Fortigate firewall integrate with DHCP Server

hi everyone welcome back to my video so in this video we will learn together how to deploy our window DHCP server into our Network environment so like this you can have Windows Server configure so after that you can deploy it in your network environment okay so if you are new here watching my video please subscribe to my channel and don't forget to give the thumbs up if you like my video okay so let's go back to our topic uh for you as a network infrastructure or network engineer you should know this configuration how to deploy your the HTTP server into your network infrastructure because uh for the best practice uh for the real Network environment some company they have the ACP server window the HP server so like this they are easy to manage and control the client as well so okay I hope this video can help you to get more idea how to deploy your network infrastructure okay so let's go to the lab together and we will see the step-by-step configuration okay this is our gns3 blank project so we will create one project related to our lab so okay first of all we go to our firewall and we uh take one firewall this is our uh the ACP server that we will configure okay the cloud and our client so for our client we have Windows 10 and windows when client okay and then we choose switch our call switch okay so uh everyone I need some time to complete this topology so [Music] foreign one minute I will complete the topology and we will continue our lab configuration okay [Music] [Applause] [Music] [Music] okay everyone as you can see for this lab here the topology and we will configure two we land we land 10 and we land 20 and another we learn for our server we learn we learn 7. okay so this is our topology and we start we start our for the get firewall okay so left with our foreign okay okay [Music] so now I will afford to get five wall starting up we log in and then we configure our foreign IP address in order to uh get the IP and then we get we can log in by web browser so it is easy for us to configure by a web interface that's okay if you are an expert you can configure by a command line okay so now we set the IP for our van pod okay follow the IP address of my Wi-Fi okay okay so we want to verify the IP address with my Wi-Fi so everything is correct foreign [Applause] [Music] foreign [Music] [Applause] [Music] thank you foreign [Music] okay now we can ping so like this we can go to a web browser and we log in by web browser so we can start our configuration with a web interface okay here our first log in username and password admin [Music] okay as you can see here our display name the 40 get firewall that we just uh that we just in code so if we want to change also the hostname so we can change in our command line so we go to Global configuration and then we set the hostname okay so we like this we can identify our hostname firewall okay okay after we set the host name so now everything changed to the same as we configure so let's start with our interface okay so we did part one this is our van part so we did some setting with our van part here okay okay so we continue to our land we are going to configure our land we have mentioned here we learned 10 20 and we lens when okay so let's configure our VLAN together with the physical port on the for the get firewall on part two okay so this is a very basic one for the VLAN configuration on forget firewall because uh I have many uh live practice already with this configuration so you can familiar with this VLAN configuration okay so uh okay so let's configure our three VLAN here [Music] thank you foreign [Music] after that we we need to create one zone the Intel VLAN zone so all the VLAN we can communicate with each other okay so now we have a VLAN and then we have our Zone so uh okay for the VLAN on for the get firewall we already configure so now we start our car switch so I think for the course food we have some little configuration on the cost switch so we we create we create the with land on our cost switch and then we specific VLAN for our Port connection [Music] thank you okay so same thing for our switch access switch here so we start our access switch and then we create the VLAN as well the same thing we land 10 20 and VLAN 7 and Azan the access VLAN port to specific VLAN vlantern and VLAN 20 for our client okay foreign [Music] [Music] [Music] we start our client window 10 client okay so uh wait for our client to start up [Music] [Music] okay so now we uh we log in to our client and here the the Windows 10 client and we verify the IP address whether our client can get IP address or not actually it cannot get any IP address because we don't have any the ACP server yet so just want to let you know that our client we don't have any IP address yet okay so we can check here the network adapter you can see uh we don't have any IP address [Music] okay so this is the most important part that the about the HP server will provide the IP address to our client so let's start our window dhp server foreign to start up [Music] okay now our Windows start up dc01 so um in order to configure the HTTP server first of all we need to assign the static IP to our Windows server so let's go to our network adapter and we assign the static IP address for our server this is my static IP address for my Windows Server also the Gateway you can see the Gateway is the IP address of our vlans when uh firewall okay after we assign the static IP address we can start our configuration with the the HTTP server for this step we need to configure the rule for our server so we configure the hcp server rule okay so we just select the dhp server rule and then you can add additional feature it is very easy you just follow step by step for the this configuration okay so now we start installing our the HP server row so we need to wait for the installation complete after that we can continue our configuration okay so now the installation complete we need to finish our uh installation with this step so we we opened the the alert here so uh just click commit to to complete our installation Okay so now our server is ready we have the ACP server now so you can see here the ACP server uh we can start configure our uh the ACP server for our client and our VLAN as you can see uh as you can see with the diagram the topology we have a VLAN 10 and VLAN 20 so we open our the HTTP configuration page here and then you will see our server and we have ipv4 and ipvc configuration so for our left we will practice on ipv4 okay [Music] [Music] foreign [Music] our new scope configuration with the VLAN 10. Okay so so we just put our name for our scope okay and you can put some description here uh it is for freelancing [Music] okay for VLAN 10 as you can see this is uh our IP address uh the start IP address and the nip address here I start from 10.10 [Music] foreign [Music] [Music] foreign [Music] this is our DNS server so later on we will configure This Server as DNS server as file so that's okay we we type in our IP address of the server so later on we will configure okay just let you know this is our IP address [Music] so you just click next and finish our configuration so now we can have our scope here for VLAN 10. [Music] okay so now we continue to configure another scope for VLAN 20. you just uh follow the same thing for VLAN 10 okay foreign [Music] foreign [Music] [Music] 10 and VLAN 20. here [Music] so let's go back to our firewall [Music] we okay we try to check our connection to our dhp server so let's try to Ping our window the HP server the IP address is 7.254 okay [Music] so we cannot ping from our firewall so what is wrong with our configuration let let me check the the setting so whether I missed something [Music] I tried to configure the default gateway okay [Music] so I try to create the firewall policy to allow our VLAN here [Music] thank you [Music] [Applause] [Applause] [Music] [Applause] foreign server [Music] okay I cannot ping our server so what is wrong what is wrong with my configuration [Music] let me verify our IP address of the ACP server again okay try to disable and enable our network adapter and verify the IP address okay it's 7.254 correct why we cannot ping foreign [Music] okay so let's try from our Windows Server ping to our Fiverr oh we cannot ping as well our firewall [Music] thank you [Music] Okay so uh we cannot ping our firewall let's go back to level five wall and uh let's try to check with our firewall IP address okay we cannot ping our IP address firewall IP address why life every day later die not okay all I want and I pray all I need is a better day me I'm looking in the mirror so foggy but I've never seen clearer I don't really think anyone can save me and honestly I'm not really sure I want saving I like to be My Own Worst Enemy there's no risk if you don't try at anything so imma just keep buying everything see you in the next life to be a better me I don't think that my head's on straight gotta flip it and grip it and go and get an x-ray what's wrong with me I just feel away pushing on my chest and it squeeze till I suffocate better change my mindset meditate it's pretty cool that I'm alive and have better days I could walk see here I should celebrate think I could change my mind maybe elevate every day late at night not okay all I want and I pray [Music] okay so let's try to check our relent uh okay we can ping our VLAN 10 the IP address we learn 20 also can ping so let's try to check with our freelance when okay so we learn the one we cannot ping okay like this everyone we go back to our interface uh and then we verify again okay vlans when uh as you can see here sorry everyone this is my mistake we lens when I forget to assign the IP address for our uh interface of vlans when so okay this is my mistake here so we go we assign the IP address for vlan's event and we check again [Music] okay so let's try to Ping our uh vlans event again if we can ping or not so okay now we can ping so everyone this is my mistake here so let's go back to our window and we try to Ping our firewall okay now we can ping yes now we can ping to our firewall [Music] okay so let's check with our DHCP server we don't have any client and connected yet so why why we don't have any client okay so should we have a window 10 client on here let's go back to our uh client and we we try to check with our client we try to get the IP address form of from our dhp server to to disable and of all our network adapter in order to refresh the IP address so so let's check again okay so still cannot get IP address okay everyone window 10 cannot get IP address so we check with our Windows when client okay we wait for our Windows Event client to start app now our Windows events start app so let's try to check with uh IP address okay everyone Windows Event client also cannot get IP address what is wrong with my configuration so let me verify again [Music] foreign [Music] go back to our L5 wall and verify our configuration okay everyone in order to uh integrate about the HTTP server with our forget firewall so one more step that we need to configure in our firewall is the the ACP server so here the HTTP server here we need to go to our VLAN interface and then we go down to the HP server for for here you need to disable this option the the HTTP server in for the get firewall okay and then we go to at once in order to configure our the ACP server here window the HP server we can call it the ACP relay okay everyone so this is very important step that we need to know so this is our IP address of the the ACP server okay you can see here our dhp server we have this IP address so 1.254 okay correct so here is the step that we need to configure in our firewall [Music] you can see here that the HP server we call it the HTTP relay so let's check with our client okay now our client can get IP address Okay so uh let's try to Ping [Music] so let's try to Ping to about the HTTP server oh we cannot ping so what happened our client can get IP address but we cannot ping our uh the sap server we try to Ping our Gateway also we cannot ping our Gateway okay everyone I think maybe I have another mistake here why we can why we cannot paint let's check together what what is wrong with my configuration Okay so uh our client can get IP address let's go to our dhp server and we will check our dhp server okay let's uh refresh here the Okay so we we learn 10 scope here okay so let um refresh here okay we have two clay and oh everyone this is my local PC also can get IP address so I think maybe it have conflict with my local PC here so like this uh we need to block some traffic to our local PC okay so everyone let the check this step how can we block this uh traffic okay so as you can see now my firewall also disconnect and we cannot we cannot access to our Fiverr okay we go back to our gns3 and then we go to edit free friend to check our setting here on the VMware okay uh this option you need to block the traffic okay let's try again okay still cannot maybe are watching S3 still not take any effect setting so [Music] foreign [Music] [Music] foreign [Music] we try to refresh our connection [Music] foreign [Music] let me try to refresh our connection here [Music] and then we try to restart our firewall okay [Music] foreign [Music] we tried to Ping again still cannot still cannot ping our firewall okay so we we cannot ping our firewall so maybe I [Music] [Music] foreign [Music] I try to delete this link and then try to connect again let's see how it worked okay so okay everyone now we need to delete the link and configure the connection again okay so now we can log in back to our firewall okay [Music] [Music] foreign [Music] 20 we try to configure the HTTP server by disabled this this option and go to add once and we can configure our DHCP relay here okay [Music] thank you okay so now we check with our client Windows when client and for wind VLAN 20. okay everyone our client still cannot get the IP address so let's try to disable and and the ball okay so let the check again the IP address we still cannot get IP address so what is wrong with my configuration here [Applause] [Music] okay everyone so let me check again with uh [Music] [Applause] [Music] okay everyone let me try to check with uh our Windows server we cannot ping about firewall again so maybe maybe our configuration the connection is error here we we cannot access to our firewall from the HTTP server so so we tried here [Music] foreign [Music] foreign [Music] we try to stop all our devices [Music] okay we try to stop all our device and close our TN S3 so now we restart our watching S3 again so we start avoiding S3 with firework industry to stand up okay everyone [Music] okay so now our gns3 start up with we try to start our firewall and our the HP server again okay so we start wait for a moment to uh with okay wait for a moment for our the HP server and our client to start up also about firewall as well [Music] after that we start our switch cause foot and our access switch [Music] thank you okay so now everything is done up I will try to check again with our client okay in order to get IP address for from our server okay still cannot get we try to check with our Windows 10 client okay so for our Windows 10 client also cannot get IP address so everyone what is wrong with my lab here [Music] foreign [Music] so let's give me some time to check whether what is wrong with my configuration so let's check together okay foreign [Music] thank you we can ping our firewall we can paint our Windows Server so let's try to uh add another client Okay so huh I'm not sure whether uh what is the problem exactly so let's try with our new client on here okay [Music] okay so I try to add to client and here and we configure the part for our client so we assign VLAN 10 and VLAN 20 port to our client okay [Music] thank you foreign [Music] check with our client this is a PC one and we try to get IP address from our dhp server okay we cannot why still cannot [Music] [Music] okay so we try to check with our PC2 iPad we we we get IP address from the HP server okay PC2 also cannot get IP address so what is wrong with my configuration so what is wrong with my configuration [Music] [Applause] [Music] foreign [Music] [Applause] [Music] foreign like this we try to connect our client with the password directly why we still cannot okay so let's go back to our course which and we assign this part to our VLAN okay so let's try to test with our call switch okay we learn 20 oh everyone I sing I found the issue because okay let's try to verify our VLAN oh everyone my course which lost configuration with the VLAN so I think I found the issue now Let's uh let's add our VLAN here okay so we don't have VLAN 10 and we land 20 on our cost rate that's why our client cannot get IP address Okay so we add the VLAN 10. and we verify our VLAN again whether we have or not okay now we have vlans one VLAN 10 VLAN 20. this is my problem yes we found it so let's try to check again with our client okay Okay so our window 10 client and uh now we refresh and try to check okay our Windows 10 can get IP address so we go back to our window so when client and and we try to check okay now Windows 10 also get IP address everyone I think this is a our problem here we forget to sell the configuration on call switch okay so so we try to test again with pc1 pc1 get IP address okay now pc1 also can get IP address uh so we try to Ping to another client okay camping we try to Ping uh we try to clean the length 10. okay I cannot so try to check with our PC2 okay PC2 also can get IP address okay so we go back to our client and here 10.10 k 10.10 so we try to Ping from our client and window 10 client so we ping to another client okay 10.11 oh sorry everyone actually it is a VLAN 20 so 20 not 11 not not 10 not 11 so okay uh so [Music] so let's try again uh 20.11 okay we can ping why we cannot ping uh VLAN 10 with okay everyone I think uh we need to check our window firewall on our client so we go to window 5 wall here and we check [Music] okay so we turn off our firewall here [Music] okay we're trying to Ping again now we can ping because of the window firewall block the traffic [Music] okay everyone so we try from our PC2 also can so we try to check on Windows when client on okay okay we try to Ping from our Windows Event client here we verify IP address this is VLAN 20 and we try to Ping VLAN 10 okay camping so uh we try to Ping our the HP server also campaign okay everyone I think this is our lab we have a successfully configured about the HP server to assign IP address for our client and here Windows run and window uh 10. so uh I hope you get uh more idea how to deploy your the ACP server with your network infrastructure so I just want to clarify with you that you need to enable this the HTTP server option and configure it as a relay here the IP address of the HP server okay everyone so thank you very much for watching my video and if you have any question please comment below and I will get back to you as soon as possible okay

Channel: TAN Kirivann

Views: 6,382

Keywords: Tan Kirivann, tankirivann, fortinet, fortigate, fortinet firewall, windows server, DHCP server, How to configure DHCP Relay on fortigate firewall, how to integrate dhcp server with fortigate, WMware VM, DHCP Relay fortigate firewall, fortigate firewall integrate with dhcp server, gns3 vm, how to integrate fortigate with dhcp server, vmware vm import to gns3, active directory, vmware tool, GNS3, cybersecurity, interface vlan routing, routing, Networking, ccna, cisco, interface vmnet

Id: PcVgBMAO3UQ

Length: 62min 3sec (3723 seconds)

Published: Sat Oct 15 2022