Assigning ip addresses
1 like249 views
The document discusses various FortiGate installation and configuration topics. It begins with basic installation and setup, then covers more advanced topics like connecting to dual ISPs, protecting servers, high availability, VLANs, virtual domains, and security enhancements. Specific sections address assigning static IP addresses via DHCP based on a device's MAC address, and ensuring certain devices always get the same IP from the FortiGate DHCP server by adding MAC-IP reservations.
Assigning ip addresses
- 1. Introduction The basics of installing and initial setup of a new FortiGate unit Advanced FortiGate installation and setup Connecting a FortiGate unit to two ISPs for redundant Internet connections Using a modem for a redundant Internet connection Distributing sessions between dual redundant Internet connections with usage-based ECMP Protecting a web server on a DMZ network Protecting an email server with a FortiGate unit without changing the network (Transparent Mode) Using port pairing to simplify a Transparent mode installation Connecting networks without translating addresses (FortiGate unit in Route mode) Setting up the explicit web proxy for users on a private network Setting up web caching of Internet content for users on a private network Employing high availability (HA) to improve network reliability Upgrading the firmware installed on a FortiGate HA cluster Connecting multiple networks to a FortiGate interface using virtual LANs (VLANs) Using Virtual Domains to host more than one FortiOS instance on a single FortiGate unit Setting up an administrator account for monitoring firewall activity and basic maintenance Enhancing FortiGate Security Creating a local DNS server listing for internal web sites and servers Assigning IP addresses according to a MAC address using DHCP Setting up the FortiGate unit to send SNMP traps Troubleshooting by sniffing packets (packet capture) Advanced troubleshooting by sniffing packets (packet capture) Creating, saving, and using packet capture filters (sniffing packets from the web‑based manager) Debugging FortiGate configurations Quick reference to common diagnose commands WiFi Networking Using security policies and firewall objects to control traffic Limiting employees’ Internet access Restricting Internet access per IP address Excluding selected users from UTM filtering Verifying that traffic is accepted by a security policy Arranging security policies in the correct order Allowing DNS queries to only one approved DNS server Extending AirPlay and AirPrint communication through a FortiWiFi unit Advanced FortiGate installation and setup : Assigning IP addresses according to a MAC address using DHCP Assigning IP addresses according to a MAC address using DHCP Problem Ensure that certain users or PCs always have the same IP address when the FortiGate unit assigns addresses using DHCP. This feature can be used to ensure that certain users can always connect to the network, or to track Internet usage by IP address even if IP addresses are assigned automatically by the FortiGate DHCP server. Solution If you have an existing DHCP server enabled on the FortiGate unit, enable IP reservation within the DHCP service settings and then add the MAC addresses of PCs that you want to always get the same IP address. 1 Go to System > Network > DHCP Server and Edit the DHCP server. 2 Select IP Reservation and select Create New and add a MAC IP address pair: IP 10.10.10.18 MAC Address 00:13:72:38:6a:39 The IP must be within the range defined by the DHCP server. If the PC is already connected and has acquired an IP address from the DHCP server, you can set get its MAC address and IP address by selecting Add from DHCP Client List. When the list appears, select the PC from the list and select Add To Reserved. Results The PC will always acquire the reserved IP address from the FortiGate DHCP server. Verify that the PC has acquired the correct IP address by viewing its IP configuration or status. For example, from a command prompt, you may be able to enter the command ipconfig/all. From the FortiGate web‑based manager, go to System > Monitor > DHCP Monitor to view the list of PCs that are using the DHCP server to acquire IP addresses. The PC with the reserved address will appear with an R next to the address. If you do not see the PC in the DHCP Monitor or if the “R” icon is not visible, you may need to either restart the PC, or renew its IP configuration. Assigning IP addresses according to a MAC address using DHCP http://docs-legacy.fortinet.com/cb/html/index.html#page/FOS_Cookbook... 1 of 2 4/20/2015 4:50 PM
- 2. Ensuring sufficient and consistent bandwidth for VoIP traffic Using geographic addresses Providing Internet access for your private network users (static source NAT) Providing Internet access for a private network with multiple Internet addresses (dynamic source NAT) Dynamic source NAT without changing the source port (one-to-one source NAT) Dynamic source NAT using the central NAT table Allowing access to a web server on an internal network when you only have one Internet IP address Allowing Internet access to a web server on a protected network when you only have one Internet IP address, using port translation Allowing Internet access to a web server on a protected network when you have an IP address for the web server Configuring port forwarding to open ports on a FortiGate unit Dynamic destination NAT for a range of IP addresses UTM Profiles SSL VPN IPsec VPN Authentication Logging and Reporting Assigning IP addresses according to a MAC address using DHCP http://docs-legacy.fortinet.com/cb/html/index.html#page/FOS_Cookbook... 2 of 2 4/20/2015 4:50 PM