Assign fixed IP with External Radius Server?

[quangvu37]

Dear all,

Is there any way that Fortigate can assign a fixed IP for DHCP Clients, based on their MAC-Address, using an external Radius Server?

I need a fixed IP address per user, for tracking their behavior.

Thank you!

[xsilver_FTNT]

Hi,

if you are talking about normal DHCP on network interface in FGT, then this implementation is fairly simple.

It can assign always the same IP to client per his MAC address. Not from RADIUS (Framed-IP-Address).

AFAIK IPSec was able to assign IP from RADIUS Access-Accept response. 

Maybe you can utilize FGT feature to relay DHCP to the DHCP where your RADIUS server is getting IPs from.

So for example you run DC with MSFT DHCP and NPS for RADIUS, then relay FGT DHCP requests to that MSFT DHCP and get similar result as if NPS would have set IP.

[emnoc]

I would not do that but assign it by the user using the framed-ip  and attribute 1 , that's what RADIUS is used for. Why would you  bind an address by mac_address? 

I also would investigate any VSA that  fortinet has and see if you have other means.

http://kb.fortinet.com/kb/viewContent.do?externalId=FD36919&sliceId=1

What radius server are using  fortiauth, ciscoACES, freeradius,etc.....?