Entry for Static IP Address

[DarwinPH]

Hi Everyone! Our company has been using Pfsense as our firewall for a couple of years and we have recently purchased a Fortigate 300C to support additional users as well as for more functionalities. In Pfsense, we set an IP Range for the DHCP server. The range we use is 172.20.10.100 - 200. We also set most of the workstations to have static IP addresses. As well as our servers and AP' s and switches. The problem is that we are having difficulty assigning static IP' s in our Fortigate 300C. We have already created a DHCP Server in Port1 with the same IP Range. Right below it is the IP RESERVATION portion. Is that where we will assign the static ip addresses? Thank you very much for your help! Blessings!

[rwpatterson]

Welcome to the forums. I don' t quite get the question. Do you have static IPs or reserved IPs? They are not the same.

[DarwinPH]

Thanks for the welcome! I guess you can say that its RESERVED IP' s but not well within the IP RANGE indicated in the DHCP IP RANGE. Like what I mentioned, the DHCP server in our FORTIGATE has the range 10.100 to 200. This range is only for guests that connect to our network, wirelessly mostly. I want to assign specific IP' s to our workstation eg 172.20.10.50 to Counter01 and so forth. So as their IP addresses do not change. Where can I do that? OR would it be efficient if I just change the IP RANGE from 172.20.10.2 - 172.20.10.200 then EXCLUDE the range 10.2 to 99. Afterwhich put into the IP RESERVATION portion which machine is getting the excluded ip' s? Thanks in advance!

[ede_pfau]

The DHCP server cares for it' s range of assignable IP addresses, and basta! What else you do outside that range is none of it' s business and it does not need to know. You won' t find any place in FortiOS to put that information anywhere as it' s just not needed (to run the DHCP server successfully). AFAIK you cannot reserve addresses that you exclude. At least, you won' t do that. You reserve addresses that you want to be assigned to always the same hardware (read: MAC address). In your case, only the servers, APs, printers and switches need a static IP address. For simplicity, I would assign them statically on the device. On the other hand I' ve seen networks where all devices were administrated by the central DHCP server (call it IPAM...), some by reserved IP/MAC combinations, and some floating. This way you can easily change the whole network scheme centrally. While this won' t be happening every month it might prove helpful in every day administration: one glance at the DHCP monitor tells you which devices are online and which are not.