Technical Tip: Email notification for DHCP IP lease

Mrinmoy · ‎10-03-2023

Description

This article describes that some network administrators prefer to be acknowledged for DHCP IP lease information from some audit or security point of view.

Scope

FortiGate v6.4.0 or above.

Solution

Make sure email notification is enabled.

Configure the Automation stitch.

CLI configuration.

Part-1-Trigger event:

config system automation-trigger

edit "DHCP-EVENT"

set event-type event-log

set logid 26001

Part-2-Action on event:

config system automation-action

edit "DHCP-EMAIL"

set action-type email

set email-to "acb@xyz.com"

set email-subject "DHCP IP lease info"

Part-3-Summary:

config system automation-stitch

edit "DHCP"

set trigger "DHCP-EVENT"

config actions

edit 1

set action "DHCP-EMAIL"

set required enable

Result: the email body should be something like as below

date=2023-10-03 time=06:53:11 devid="FGT61FTKXXXXXXXX" devname="FGT" eventtime=1696341190215829319 tz="-0700" logid="0100026001" type="event" subtype="system" level="information" vd="root" logdesc="DHCP Ack log" interface="internal" dhcp_msg="Ack" mac="00:0C:29:A6:05:FE" ip=192.168.1.110 lease=604800 hostname="OPNsense" msg="DHCP server sends a DHCPACK"