Fortinet NSE4_FGT-7.2 — FortiGate Firewall — Section 1: FortiGate Firewall V6.4 1 Part 24

32. Lecture-32: FortiGate Firewall as DHCP Relay Lab.

DCP Relay how we can configure a four billion firewall to what is our DCP relay, what is the relay when you are DCB sold, what is available and is something and you are asked is available another subnet? So, what will happen? DCB said we’re standing on the big gate and. A broadcast which we saw, by the way, still here on the beginning and broadcast and none of the device, which is Lantry device, it will not pass. There needs to be. These messages to the past, because on these are in broadcast, so it will be destroyed here.

So, what we need to do, we need to configure this for the firewall is a region there. Look at men who are aged between the host and the DCP server. Bid. Okay. You cannot be. Broadcast, but you can convert them to unicast and give it to the lost and dignity and give it to me like a broken.

So, we call them our DCB religion. This is the job they will do, so if you have a scenario and you want to be sure what is available and other sounded like in this report, you will use my DCB said, what is in Lenn inside? Which are Cottington 101 60 and wondering what my client is available in VMC. I want to configure this DCB to divide people, these zone like WilliamsI one, maybe two, three, maybe some others on.

So, yes, it’s possible configures schools here and this DCB fight, it’ll be something differently, but there’s something to do for other subtenant, three, four, five, and really want this to be okay here. I’m giving you one example, but there should be many example. There are many zones. And BHP is one.

So, what they will do, we will configure this. Fought the good fight. One is a religion and will be significant and will distribute to the proposition by using the IP address to distinguish them, because we will be here as a gateway to keep in mind.

So, let’s do it. Million follow the same topology which reconfigure the NCB, but this time we will remove the regime is enabling both B and for one this time. I wonder this my DCB server, which is windows are what it we were in December 2003, Windows Server 2000 and Windows 2000. Full Windows 2000, 2016, either Windows Server 2019, which the latest one. And it can be a Linux and it can be are and it can be a level three switch and it can be anything. But most of the time, you will find his own wind window over.

So, before going to figure this one, let me remove the DCB, which configure and lastly. It meant one, two, three. Okay, so on two interfaces, we enable DCB, we will keep rest up every detail the same.

So, let me go to DMZ, DMZ and land a meeting of the DCP. Okay, and and we want to learn. And on this one, that’s a. Again, I don’t have any IP on that line.

Sorry if I want to be. Okay, and we to see and which everything was working before, and if I said I’m going to slash release. And if I see renewal, nothing will be a sign of people. Is redistricting because there is no disputing AYP. After a while, it will show up by one six, nine to four. This is a range of people.

So, let’s it for a while and let me close this one. Okay. And if I will here, as well and the time we get from here, as well. This the interface, so 008 Peosta, it means releasing it will show up after a while anyway, we can ensure nothing will be assigned. And also if you drink the other hose, there will be no IP. Suppose, this one is. If I go in and do the same thing, which I didn’t before and DCB.

So, it’s showing me that if I do again, it will not show. Laura, do you do disco, disco or disco or it’s a nobody is there to me, IP is disco, but nobody is dear rather than to use a load of roses.

So, it’s not working. I’m definitely twisted in not finding any DCP, so definitely there is nobody DCP So, let’s configure DCP Server enough inside and inserted something that we have our DSP.

So, let me click on the ATP server. Okay. And what is the buzz word for this one? I think so. There’s one, two, three. Because there’s been ages, I never use them, but I think your test one, two, three, by by I look so now I’m here and Deacy be so. First of all, I need to assign any IP.

So, what I need to do, I need to go to control panel. Interface. This certainly year old social networking sharing center. Okay. And what I need to do to change it after this thing is the first one.

So. It’s going to be one dark, one zero three, and, you know, we will assign our own IP.

So, let me assign one or two to one 168, one guard, suppose one of them. Because we are using this audience, somebody always who. Certainly going to be this one. Okay.

So, what I need to do this, the I wonder and the degree will be the will I be under and then will be entertained court and also your own in this somewhat, I suppose. I deliberately introduced the other one is one one, one SOCOs. Before way, it’s I because I on the DCP said, well, you know, I on this sort of an BCB was enabled so this way instead of one zero three IP.

So, don’t worry, you will see from rearresting the IP. I just removed the ACP, but I enabled this server before, so I don’t mind. Maybe you are thinking from rearresting the IP. I don’t need I’d be six to eight Dec Liberi 16 and assigned to this.

So, one doctor might be just the first two.

So, let me write down if I okay, I need to unlock duplicate.

So, this might be so why. Because later on we will be here. Okay. And again, is the IP know assigned to this DCP, so now the second thing is I need. It’s better to do communication with the 192 168, one hundred 110, I guess I can begin to get communication is okay now click on this one. Server manager, what I need to do, I need the services role, ritual, I need click on a role. Next, I knew DCB, there are so many things, including terrific server, his files, but we Ripsaw anyway. Right now I just need DCP Server to I believe there will be a server next. Next. This might be I’d be reassigned just to this one. And Dauman should be limited time. Astarte local suppost. It’s 30 in this audience, which we just assign instead of what I don’t need. Okay, I don’t need to create a school here. I will create a little. Next. Do you want to know what I do? Nudity and copy of Sex and Install. This is the way to kind of forget it, and it’s almost similar in 2019 as well, and also 2016 just the way it is different. But installation and minute is almost similar to knowing what I’m doing. And two thousand and so you can do it in 2012 and 16 and 19 as well.

So, I installed the features installed and closed now, so my DCB Sartoris installed Services Will Start Administrative Tool and here is DHP. Click on DCB.

So, this is my DCB. Click on it before I don’t need IPV six this and create a score. Scope is nothing to the range you need to assign to click on it before any of this will click next.

So, Demsey school. This I.B. will be assigned to the DMZ site, what will be the star gap? So, now this is the question. You have to be careful. Richard Angiulo sanitariums you, too.

So, what is the start? Be 100 to 160 to the 200 soldiers and what will be the end be 100 to 150 year to dart. 250 suppos. Keep in mind. I’m creating this, quote, foreign BMC. And next to. Now said, do you want to exclude any I.B. if suppose if you don’t want to give them any one? I said no, I don’t want to exclude any. If you want, you can mixed this in for how long you want to lease this IP. This is if you want to minimize, you can do it. Do you want to configure option. I say yes, this for this. Another thing to remember, keep in mind someone asking me how they recognised to go to orange to this one and one branch to this side and three and to another zone and full range to another zone. I’m repeating due to this IP, this really important, you have to drive one nine, you do 160 in order to enter. What is to how to that hundred is the DMZ. Interface, I would be. This one. That’s the Demsey Gateway Interface IAP, this will be the recognition, this to keep in mind and. Now, next. The Institute of Energy entered in one one is enough for me. And you said, so I don’t want to assign any and said, what do you want to do in this school? Yes, I want to do it and finish. This group is really far outside BMC, the one, this one. But I want to configure them for my own inside as well to create a new school. Let me quickly create a new school right before three new school next. And this time I still in school. What is the description, if you want to start, I’d one two one sixty eight, one hundred and one ninety two point sixty eight. One two forty one. Lindis, this, this and this and the other former CIA station and proper notation, I don’t want to exclude anything this the time duration I want to end. And this is the important point. This time I will say Wunderkinder. Which is why inside. Firewall interface IP board number two, I believe, and next, DNS the same, I don’t need you in server and into it and next and finish to school has been cleared to differently one and two. Right now, my own target is two one, which is the other side. Is there any leads? I’d be surrounded. There will be no Eyebeam. Should I get from here, there is a DCB server now. Do you think it will be north? Discarded discover, discarded sending. Do you think if I give shouldn’t back it here, there will be no. The finger is reaching here. The U.S. is reaching here, discover, but they will destroy it. Look at me. You are sending broadcast picture and I can broadcast to anyone else. That’s why I’m still not really and look at so many discordance still standing and doing this go up if I do again.

So, back at number three six five nine if we do it again. Look at Discover, Discover, this may start in one, two, three, four, four, discover, but nothing is there, even though this is going to figure out if I can give this. Let me show you. I don’t know here. I’m not used to. Number two, there will be no need to be picky. This for sure. Because they think it is not reaching this site. It’s being destroyed by this fire, one, two, three. Now, I do want to make this first one is. And then it will work to this side is nothing the. Bik. Nothing is here on this site, so the prejudice here in. Maybe you said the same lubricant, assuming nothing is coming here, this side but this side, look at I’m it will increase if I do again. Okay. Still learning. Now, it’s clear to you that the finger does not reaching here for some reason, and the reason is nothing really good gossip.

So, how I can configure I will go to the airport where it’s hitting me, disrupting this board, number three. I will look for number three, which is DMZ, click on the server and click on it was this time I will say no, you are more than Nazira, you are playing a role again, lingeringly and know who the hell is DCP Server IP.

So, that’s why I didn’t hear this. The IP okay slot.

So, I will five one ninety two hundred sixty and one dart in this server. To reach him, they are this one. Vincent, and now it’s become like a DCB, really. This is the only thing you need now you will see if I do on this side, you will see, but not in broadcast, nor the beginning of the broadcast. It will be unicast.

So, let’s do it again. The NCB looked at. Is it cost, Norm? And let’s get to the two hundred that everything is okay. Internet will work, everything will work. Yahoo! Dot com. The thing is the same. But. These are the unicast painted on this side and this side, and soon the first recording broadcast between the two receiving yards receiving is a unit cost. Disco was in broadcast, so as in the beginning and hit by this firewall, what is this bar on this one? So, when it’s with you, okay, he said, I’m an Asian. Okay, I will pass your message to this guy, but I really couldn’t read the message. Normally you can do the same thing. They will say, look, I will buy this house for you.

So, they will say, I will buy this house for you on suppost. Two thousand pound.

So, when they’re passing this message to here, they will say, no, I’m selling this one for you on maybe fifteen thousand pound. And this is what they do here. This is you the record as a broadcast. They make them unicast and send it to the server and then make an unicast and give it to their guy. This is the job of Ajan. And now if I go back to the EXPE, this get to 40 automatically this time. Okay, and everything will be working. And if you check the Internet differently because we know everything so on the thing and all this stuff will work. And again, you can really find problems.

So, you are not this time. Do you see big line from here because DCB is now server. Okay, now listen. This side, the other side, no issue, but the gateway is this one.

So, you can configure land. as well is an agent as well. If you are otherwise it’s directly connected. But anyhow, let’s do it quickly. No need. But in case. For some reason, so what I need to change the rule to this one and one nine two two one sixty eight one dog, Ben is the DCP, so IP, that’s it. And if I go back here and click on this one, so definitely it will also get much from one branch.

So, I B, B and C, B, so it will be Dora Brosius ok. And definitely will get it from one branch and also it will be reachable to any Yahoo, Gmail, Facebook and whatever because everything is ready for them. And the same thing. It can be so many Zohn. Again, no issue. The only thing is you need to do here now, okay? Let me show you the eyepiece. It will be released, okay? It has to show me here, I need to refresh, okay, and just give me one minute for somebody and it’s stuck so it will show you release. I’ll be okay. And just give me a minute while somebody is mr.

So. Okay, okay, just because we know we need to minified from here and also the IBT deserve there so we can resolve here now. Yes, okay. Now these are the situation if you want to visit them and these are the extras for me. If you want to configure to give to the client and you can assign a filter out and do the same thing which was here. Okay, now, Liz, so let me use these other two I’ve been giving to to GLI and also for this one lens and this, I believe, when IP has been given.

So, let me go to this. This will certainly be going to. Okay, okay, this is the same issue I need to start and stop, so stop and start. And if I come back again. Here and now into and Beatrice Beatrice.

So, it will appear through the process and if I come back and refresh so it will see to a now. Okay, stuck in your head for some reason.

So, this is the way to really fight and you can feel it or you can reserve and you can assign so many things normally and many other organization, you will see this type of thing. But the only change is, is this one is you remember the second class which we’ve done.

So, this is a trunk. And there are so many women can feel that inside. I assure you they’re going to dig there. The Prodigy is a example and you can really learn how different I be, remember? So, BCB will recognize by this interface IAP and building again, so many student that interesting how they know to give to range to this range and one to this one how they know, they just know by Dysport or define IAP.

So, if you can figure this is a drug which will be done in second or third class, I can’t remember. And so we create so many inside we to every million different range and everybody will in a different together.

So, there will be certain and then you can three or so many school I created only to school, but you can create as many you want. Okay, so this is BCB Relay which we’ve done. Let me go quickly. If I missed something to moneywise.

So, this thing to in policy, which we did in last year and just do a modification, we can see from here. And also definitely you will see the traffic from here.

So, no need to verify because I’m not going to if I just need to see that it is working on.

So, if I want to be real in on station, so the user which is showing here on the details and also you can really find from dashboard use insulin and Bamsey.

So, we have both in as well and DM’s as well. Okay, and also you can see from log’s and reform forward in traffic.

So, these are the forward in traffic. And so you can see so many things from modification to.