How to setup windows dhcp server at NSF 3100?

Yuniar Ashurin Lv1Posted Apr-24-2025 15:39

I want to use the Windows DHCP server to assign an IP to the user. How to set up at NSF 3100?

Zonger has solved this question and earned 10 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Configure the interface connected to the user network as a DHCP relay. Log in to the NSF 3100 web interface, navigate to Network > Interface > select the relevant interface and enable DHCP Relay.  Specify the IP address of your Windows DHCP server and apply the relay settings to the relevant interfaces. This setup ensures that DHCP requests from clients are forwarded to the Windows DHCP server for IP address allocation. Ensure the Windows server has a configured DHCP scope for the subnet is authorized in Active Directory and that firewall rules on both the NSF 3100 and Windows server allow UDP ports 67/68 for DHCP traffic.
Is this answer helpful?
AR Lv2Posted Apr-24-2025 18:24
  
You must make sure that the NSF 3100 has the correct DHCP relay configured in order to use a Windows DHCP server to issue IP addresses to clients connected through a Sangfor NSF 3100 device (assuming the NSF is working as a router/firewall and not as a DHCP server itself).

Here's how to accomplish it step-by-step:

First, configure your Windows DHCP server.
Verify that your Windows DHCP server is operational and, if domain-joined, authorised in Active Directory.
For the subnet that your clients will be on, create a DHCP scope.
Verify that the scope has the DNS, default gateway, and other necessary settings.
Verify that the NSF 3100 can connect to the Windows DHCP server.

Step 2: Set up Sangfor NSF 3100's DHCP relay
Open the NSF 3100 Web GUI and log in.
Navigate to: DHCP Relay > Network Settings > DHCP
On the interface (VLAN/subnet) where clients will submit IP requests, enable DHCP Relay.
In the DHCP relay target field, enter the IP address of your Windows DHCP server.
Save and implement the modifications.

Step 3: Verify Firewall and Routing Rules
To connect to the DHCP server, make sure the NSF 3100 has routing rules.
Look for any firewall rules that might be preventing DHCP traffic from passing through UDP ports 67 and 68.
Verify that inter-VLAN routing is set up properly if you're utilising VLANs.

Step 4: Test
If a client is behind the NSF, connect it to the NSF LAN port or Wi-Fi.
The NSF will forward the client's IP request to the Windows server.
Verify the DHCP server's leases to make sure it's operational.
Humayun Ahmed Lv3Posted Apr-24-2025 18:35
  
DHCP Configuration for Sangfor NGAF:
https://community.sangfor.com/fo ... 9424&highlight=
Rotring Lv2Posted Apr-25-2025 11:13
  
Setting up a Windows DHCP server to assign IPs to users who will be connecting through an NSF 3100 (presumably a Sangfor Network Security Firewall) involves configuring both the Windows DHCP server and the NSF 3100 to work together. Here's a general guide with common steps. Keep in mind that the exact configuration steps on the NSF 3100 might vary slightly depending on its specific firmware version. Always consult your Sangfor NSF 3100 documentation for the most accurate instructions.

Part 1: Configuring the Windows DHCP Server

1.Install the DHCP Server Role (if not already installed):
-Open Server Manager.
-Click Add roles and features.
-Click Next until you reach the Server Roles page.
-Select DHCP Server.
-Click Add Features when prompted.
-Click Next through the remaining steps and then click Install.

2.Configure DHCP Scopes:
Open the DHCP management console (Start > Windows Administrative Tools > DHCP).
-Expand your server.
-Right-click on IPv4 (or IPv6 if you're using it) and select New Scope.
-Follow the New Scope Wizard:
Scope Name: Provide a descriptive name for the scope (e.g., "UserNetwork").
--IP Address Range: Define the range of IP addresses that the DHCP server will assign (e.g., 192.168.1.100 to 192.168.1.200).
--Subnet Mask: Enter the subnet mask for your network (e.g., 255.255.255.0).
--Exclusions: Define any IP addresses within the range that you want to exclude from DHCP assignment (e.g., for static IPs of servers or network devices).
--Lease Duration: Specify how long a client can use an assigned IP address before it needs to renew.  
--Configure DHCP Options: Select Yes, I want to configure DHCP options now.
--Router (Default Gateway): Enter the IP address of your default gateway (usually the LAN interface IP address of your NSF 3100).
--DNS Servers: Enter the IP addresses of your DNS servers. You can include internal DNS servers, external public DNS servers, or both.  
--WINS Servers: If you are using WINS, enter the IP addresses of your WINS servers. Otherwise, leave it blank.
--Activate Scope: Select Yes, I want to activate this scope now.
-Click Finish.

3.Authorize the DHCP Server:
-If your DHCP server is running on a domain-joined member server, you need to authorize it in Active Directory.  
-In the DHCP management console, right-click on your DHCP server and select Authorize. If it's already authorized, this option will be grayed out.

Part 2: Configuring the Sangfor NSF 3100
The NSF 3100 needs to be configured to relay DHCP requests from the user network to the Windows DHCP server. This typically involves configuring a DHCP relay agent (also known as a DHCP helper).

1.Log in to the Sangfor NSF 3100 Web Interface:
-Open a web browser and enter the management IP address of your NSF 3100.
-Log in with your administrative credentials.

2.Navigate to DHCP Relay/Helper Settings:
The exact location of these settings can vary, but look for sections related to:
-Network
-DHCP
-DHCP Relay
-DHCP Helper
-Interface Settings

3.Configure the DHCP Relay Agent:
-Enable DHCP Relay: Make sure the DHCP relay function is enabled globally or for the relevant interface(s).
-Specify the DHCP Server IP Address: You will need to enter the IP address of your Windows DHCP server. The NSF 3100 will forward DHCP requests to this IP.
-Specify the Interface(s) to Listen On: Select the interface(s) on the NSF 3100 that are connected to the user network(s) where clients will be requesting DHCP addresses. The NSF 3100 will listen for DHCP broadcast messages on these interfaces.
-(Optional) Gateway IP Address: In some configurations, you might need to specify the IP address of the gateway on the user network interface.

4.Save the Configuration:
-Once you have entered the necessary information, save the changes to the NSF 3100 configuration.
Zonger Lv5Posted Apr-26-2025 03:30
  
Configure the interface connected to the user network as a DHCP relay. Log in to the NSF 3100 web interface, navigate to Network > Interface > select the relevant interface and enable DHCP Relay.  Specify the IP address of your Windows DHCP server and apply the relay settings to the relevant interfaces. This setup ensures that DHCP requests from clients are forwarded to the Windows DHCP server for IP address allocation. Ensure the Windows server has a configured DHCP scope for the subnet is authorized in Active Directory and that firewall rules on both the NSF 3100 and Windows server allow UDP ports 67/68 for DHCP traffic.
Ayra Posted Apr-26-2025 13:22
  

You must make sure that the NSF 3100 has the correct DHCP relay configured in order to use a Windows DHCP server to issue IP addresses to clients connected through a Sangfor NSF 3100 device (assuming the NSF is working as a router/firewall and not as a DHCP server itself).

Here's how to accomplish it step-by-step:

First, configure your Windows DHCP server.
Verify that your Windows DHCP server is operational and, if domain-joined, authorised in Active Directory.
For the subnet that your clients will be on, create a DHCP scope.
Verify that the scope has the DNS, default gateway, and other necessary settings.
Verify that the NSF 3100 can connect to the Windows DHCP server.

Step 2: Set up Sangfor NSF 3100's DHCP relay
Open the NSF 3100 Web GUI and log in.
Navigate to: DHCP Relay > Network Settings > DHCP
On the interface (VLAN/subnet) where clients will submit IP requests, enable DHCP Relay.
In the DHCP relay target field, enter the IP address of your Windows DHCP server.
Save and implement the modifications.

Step 3: Verify Firewall and Routing Rules
To connect to the DHCP server, make sure the NSF 3100 has routing rules.
Look for any firewall rules that might be preventing DHCP traffic from passing through UDP ports 67 and 68.
Verify that inter-VLAN routing is set up properly if you're utilising VLANs.

Step 4: Test
If a client is behind the NSF, connect it to the NSF LAN port or Wi-Fi.
The NSF will forward the client's IP request to the Windows server.
Verify the DHCP server's leases to make sure it's operational.

I Can Help:

Change

Moderator on This Board

1
148
3

Started Topics

Followers

Follow

917
183
94

Started Topics

Followers

Follow

Board Leaders