Fortigate DHCP Reservation Process

On Fortigate firewall systems, it is necessary to write several codes respectively from the CLI console for our need to define a fixed mac address IP in the available DHCP (Auto IP) block.

Namely:

config system dhcp reserved-address
edit <name_str>
setip <address_ipv4>
setmac <address_hex>
end

Example:

config system dhcp reserved-address 
edit "ahmet_bey_pc" 
set ip 192.168.14.60 
set mac aa:46:dc:a1:cc:05 
next
end

If a reservation is to be made for more than one client at a time :

config system dhcp reserved-address
edit "ahmet_bey_pc"
set ip 192.168.14.60
set mac aa:46:dc:a1:cc:05
next
edit "mudur_bey"
set ip 192.168.14.4
set mac ae:d1:00:46:f3:5b
next
end

When you perform the reservation process, the IP number you set will only be used by the mac address you set in the DHCP pool. For this reason, your workload will be reduced and you will not have to write an IP number to a PC that you have formatted. As long as there is no change in the Mac address, the IP configuration of the PC will receive the IP address assigned to it by FortiGate in automatic mode.

Fortigate IP MAC Binding Process:

config system interface
edit port25
set ipmac enable
end

config firewall ipmacbinding setting
set bindthroughfw enable
set bindtofw enable
set undefinedhost block
end

In addition, the following commands should be typed on the CLI screen to clear the IP addresses received from the DHCP pool:

execute dhcp lease-clear

This command clears the DHCP pool except for the IPs you have reserved.