http://ppt.cc/FED5G



vlan10---->firewall----->linux dhcp server
vlan20---------↑

I have two vlan(vlan10 and vlan20), and I would like to use Linux DHCP server to centralize IP address designation.

In fortigate firewall i use dhcp relay for client get dhcp ip,

in linux dhcp server i use [host] section to limit client get static ip and allow known hosts to get dymanic ip.
#### config start

subnet 192.168.10.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
option broadcast-address 192.168.10.255;
option domain-name-servers 192.168.8.248,192.168.8.246;
option routers 192.168.10.1;
allow unknown-clients;
range 192.168.10.11 192.168.10.210;
}

subnet 192.168.20.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
option broadcast-address 192.168.20.255;
option domain-name-servers 192.168.8.248,192.168.8.246;
option routers 192.168.20.1;
deny unknown-clients;
range 192.168.20.11 192.168.20.210;
}

host host1 { hardware ethernet 11:11:11:11:11:11; fixed-address 192.168.10.20; }

host host2 { hardware ethernet 22:22:22:22:22:22; fixed-address 192.168.10.21; }

host host3 { hardware ethernet 33:33:33:33:33:33; fixed-address 192.168.20.20; }

host host4 { hardware ethernet 44:44:44:44:44:44; }
#### config end #########


in this configuration, all clients can get ip from vlan10 or vlan20...

but i want host4 can get dynamic ip in vlan20 only.

when host4 connect to vlan10, host4 cannot get any ip address from

dhcp server...

how to modify the configuration...thanks a lot...