Skip to main content
segmentation_fault
Explorer III
October 28, 2022
Solved

How was a static IP assigned in the FortiGate 60e?

  • October 28, 2022
  • 2 replies
  • 5625 views

I've inherited a rack system with a Fortigate 60e that was setup by some other company. I am trying to understand how they created a static IP ( 192.168.1.51 ) for a raspberry pi video camera device sitting in the site. When I go to "Addresses" I see this for the pi:

pi.PNG

And under Addresses  I see this is where they assigned the static IP:

camera1.PNG

However, the confusing part is I don't see where Camera 1 points to pi003? If I edit the Camera 1 or pi003 I see no reference to each other? 

Best answer by gfleming

Yes that will accomplish the same thing as the CLI instructions I posted. 

2 replies

gfleming
Staff
Staff
October 28, 2022

pi003 is a layer 2 MAC address and Camera 1 is a layer 3 IP address.

 

gfleming_0-1667000634211.png

 

segmentation_fault
Explorer III
November 1, 2022

What I am confused about is how is Camera 1 associated with pi003? See screenshots below for Camera 1 and pi003. I don't see any reference to each other in the settings:

 

camera1.PNGpi.PNG

gfleming
Staff
Staff
November 1, 2022

They don't really relate to each other. They are just logical objects representing two different things: one is an object referencing a Layer 3 IP address and the other is an object referencing a Layer 2 MAC address. In this case they are belonging to the same device but there is no real connection on the FGT.

 

Now, re-reading your original question I think maybe you are asking how to create a static IP or IP reservation for DHCP? Is this so? If the FortiGate is the DHCP server for the network you can add a reservation for the L2 MAC address: https://docs.fortinet.com/document/fortigate/7.2.2/cli-reference/60620/config-system-dhcp-server (look at "config reserved-address" command) or under Interface settings in the GUI you can add DHCP reservations there too.

alif
Staff
Staff
October 29, 2022

If Camera1 or pi003 is already connected to the network, you can view the ARP table to verify if it is learned by Fortigate.

get system arp