Viewing Address Leases; Reserving Ip Addresses For Specific Clients - Fortinet FortiGate Series Administration Manual

System DHCP

Viewing address leases

Reserving IP addresses for specific clients

FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
IP Assignment Configure how the IP addresses for an IPSec DHCP server are assigned to
Dialup IPSec VPN users. Select:
Mode
• Server IP Range - The IPSec DHCP server will assign the IP addresses
as specified in IP Range, and Exclude Ranges.
• User-group defined method - The IP addresses will be assigned by a user
group used to authenticate the user. The user group is used to
authenticate XAUTH users. See
addresses from a user group" on page
When User-group defined method is selected, the IP Range fields are greyed
out, and the Exclude Ranges table and controls are not visible.
DNS Server 1 Enter the IP addresses of up to 3 DNS servers that the DHCP server assigns
to DHCP clients.
DNS Server 2
DNS Server 3
WINS Server 1 Add the IP addresses of one or two WINS servers that the DHCP server
assigns to DHCP clients.
WINS Server 2
Option 1 Enter up to three custom DHCP options that can be sent by the DHCP
server. Code is the DHCP option code in the range 1 to 255. Option is an
Option 2
even number of hexadecimal characters and is not required for some option
Option 3
codes. For detailed information about DHCP options, see RFC 2132, DHCP
Options and BOOTP Vendor Extensions.
Exclude Ranges
Add Add an range of IP addresses to exclude.
You can add up to 16 exclude ranges of IP addresses that the DHCP server
cannot assign to DHCP clients. No range can exceed 65536 IP addresses.
Starting IP Enter the first IP address of the exclude range.
End IP Enter the last IP address of the exclude range.
Delete icon Delete the exclude range.
Go to System > DHCP > Address Leases to view the IP addresses that the DHCP servers
have assigned and the corresponding client MAC addresses.
Figure 105: Address leases list
Interface Select interface for which to list leases.
Refresh Select Refresh to update Address leases list.
IP The assigned IP address.
MAC The MAC address of the device to which the IP address is assigned.
Expire Expiry date and time of the DHCP lease.
You can reserve an IP address for a specific client identified by the client device MAC
address and the connection type, regular Ethernet or IPSec. The DHCP server always
assigns the reserved address to that client. You can assign up to 200 IP addresses as
reserved. For more information see the
Use the CLI config system dhcp reserved-address command. For more
information, see the FortiGateCLI
"Dynamically assigning VPN client IP
673.
FortiGate Maximum Values
Reference.
Viewing address leases
Matrix.
231