DHCP over IPSec (dialup) for IP/MAC binding on FortiGate 200E

[Syed_Asghar]

we wanna bind IP/MAC of a FortiClient user for dual authentication (i.e Match IP and MAC then connect).

DHCP Over IPSec & IPmacbinding table configured but didn't got any fruitful result. 

pls guide.

[sagha]

Hi Syed_Asghar, 

Please share the config you have implemented that is not working. 

Thanks,

Shahan

[Syed_Asghar]

M trying to paste snap of current configuration(GUI image), but didn't allow this dialog box to paste.

[sagha]

Hi Syed_Asghar,  

You can also paste it as text. 

Thanks, 

Shahan

[Syed_Asghar]

Dear Sagha,

Thanks for your timely response.

same configuration i have did as mentioned in underneath link.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-DHCP-IP-address-reservation-with-Dial-up-I...

[sagha]

Hi Syed_Asghar, 

What is the issue you are facing now after configuring it as per article? 

Thanks, 

Shahan

[Syed_Asghar]

Dear Shahan,

MAC binding is not working at client side, If i changed/Spoof the MAC of client  terminal, as per article it will not connect but in actual client can connect with different/spoofed MAC.