FortiGate DHCP based on mac pattern

5 replies
1229 views
Translate All

New Fortinet admin here. I'm looking to configure the built-in DHCP server to push an alternate VLAN & Subnet based on MAC address. This would be used for VoIP phones.

For example, the DHCP server would hand out 10.0.0.2 on VLAN 0 to the first non-VoIP device on the LAN. But, if the MAC address matches those used by our VoIP handsets, it would hand out 10.0.1.2 on VLAN 100.

I'm looking to do this without forcing specific ports on the switches to be dedicated to the phones.

Any ideas?

Thanks in advance!

FortiGate

AEK

SuperUser

If I understand well your requirement you want to assign a VLAN (and IP) to a device depending on its type.

If so then you need a NAC (like FortiNAC).

Or at least you may try achieve it with a RADIUS server.

Translate

AEK

wwsAuthor

New Member

Correct - I would like to assign by MAC address pattern/prefix.

Definitely not something that requires radius or a special security/authentication device/service. A linux or windows DHCP server could tackle this... but I was hoping to avoid going down that road.

Translate

AEK

SuperUser

If you just want to assign an IP by MAC then a DHCP is enough.

But if you want to assign a VLAN as well, then I don't see how you can do it with DHCP. As per my knowledge only RADIUS or NAC can do that.

Translate

AEK

wwsAuthor

New Member

Just a quick follow-up that we went with Auto-VoIP-VLAN on our switches, and created a separate LAN (VLAN Interface) on the FortiGate side of things. It works, but has introduced another conundrum.

Separate post on that here: https://community.fortinet.com/t5/Support-Forum/Change-MAC-address-for-HA-d-LAN-interface/m-p/390425#M268751

Translate

Sign up

Login with SSO

Login to the community

Login with SSO