Skip to main content
quangvu37
quangvu37
New Member
July 25, 2018
Question

Assign fixed IP with External Radius Server?

  • July 25, 2018
  • 1 reply
  • 4521 views

Dear all,

 

Is there any way that Fortigate can assign a fixed IP for DHCP Clients, based on their MAC-Address, using an external Radius Server?

 

I need a fixed IP address per user, for tracking their behavior.

 

Thank you!

    1 reply

    xsilver_FTNT
    Staff
    xsilver_FTNT
    Staff
    July 27, 2018

    Hi,

    if you are talking about normal DHCP on network interface in FGT, then this implementation is fairly simple.

    It can assign always the same IP to client per his MAC address. Not from RADIUS (Framed-IP-Address).

    AFAIK IPSec was able to assign IP from RADIUS Access-Accept response. 

     

    Maybe you can utilize FGT feature to relay DHCP to the DHCP where your RADIUS server is getting IPs from.

    So for example you run DC with MSFT DHCP and NPS for RADIUS, then relay FGT DHCP requests to that MSFT DHCP and get similar result as if NPS would have set IP.

    emnoc
    emnoc
    New Member
    July 27, 2018

    I would not do that but assign it by the user using the framed-ip  and attribute 1 , that's what RADIUS is used for. Why would you  bind an address by mac_address? 

     

    I also would investigate any VSA that  fortinet has and see if you have other means.

    http://kb.fortinet.com/kb/viewContent.do?externalId=FD36919&sliceId=1

     

    What radius server are using  fortiauth, ciscoACES, freeradius,etc.....?

     

     

    Terms & ConditionsAccessibility statement