Skip to main content
lohith
New Member
April 29, 2016
Question

Uploading cli bulk command file is giving me the error Need help

  • April 29, 2016
  • 3 replies
  • 6055 views

Hello,

I am having the problem with uploading the following  CLI bulk command file, below is the cli code i am unable to identify the exact reason for error please let me know what part of the code is exactly causing the problem, the following part of the code i copied from the from  fortinet_firewall_configuration back_UP_file.

 

Basically my purpose is adding bulk ip mac addresses for IP_MAC addresses binding.

I placed 360 entries in the configuration file

Like:

----------------------------------------------

edit 1         set ip 10.10.16.51         set mac 10:7e:DD:11:03:10         set description "1"

next

-

-

-

-

edit 200         set ip 10.10.16.251         set mac 10:7e:aa:11:03:10         set description "h"

next

-

-

-

-

edit 360         set ip 10.10.17.155         set mac 10:7e:aa:11:03:10         set description "h"

next

end

-------------------------------------------------

like above i manually added 360 added entries  directly to back_up_ configuration file, in the following format, it is uploading ip_mac address details successfully but it is uploading only 200 entries not more than that. i tried to restore the modified file again and again but whatever i could do, only 200 entries out of 360 uploaded, is there a way to to add full entries into the ip_mac binding database. or is that some kind of restriction in the firewall that it only adds 200 entries to the firewall please let me know work-around for this

either by directly modifying the firewall_configuration_back_up_file or by uploading the details through bulk CLI file.

 

for uploading bulk cli file, i think that i have to remove some parts of the following code but i don't know which one i should remove and which one  i should retain.

 

 

config system dhcp server
 edit 4
        set forticlient-on-net-status disable
        set default-gateway 10.10.56.1
        set netmask 255.255.248.0
        set interface "xyz"
            config ip-range
                edit 1
                    set start-ip 10.10.56.50
                    set end-ip 10.10.63.100
                next
            end
        set timezone-option default
            config reserved-address
      edit 1
        set ip 10.10.16.51
        set mac 10:7e:DD:11:03:10
        set description "1"
     next
    edit 2
        set ip 10.10.16.52
        set mac 00:8e:bd:78:5e:18
        set description "2"
     next

    edit 3
        set ip 10.10.16.53
        set mac f8:62:e4:32:4d:75
        set description "3"
    next

    -

    -

    -

    edit 200
        set ip 10.10.16.251
        set mac 10:7e:aa:11:03:10
        set description "h"

      next

     -

     -

     -

    edit 360
        set ip 10.10.17.155
        set mac 10:7e:aa:11:03:10
        set description "h"

      next

    end
    set dns-server1 8.8.8.8
    next
end

 

please someone help me on this.

 

Thanks

    3 replies

    BWiebe
    New Member
    April 29, 2016

    What model of firewall/branch of firmware?

     

    Could definitely be a limit of some sort depending on model/firmware level.

     

    Brent

    Dave_Hall
    New Member
    April 29, 2016

    Check out the Max value table (link for 5.2.7) - reserved IPs is limited to 200 entries until you get to the really big iron.

     

     

    Edit: would be curious to know if the reserved addresses limit is total or just per DHCP server.

    lohith
    lohithAuthor
    New Member
    April 29, 2016

    I am using fortigate 200d. So that means that there is no work around to add more than 200 entries into the ip mac table. :(

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!