Hello,
I am having the problem with uploading the following CLI bulk command file, below is the cli code i am unable to identify the exact reason for error please let me know what part of the code is exactly causing the problem, the following part of the code i copied from the from fortinet_firewall_configuration back_UP_file.
Basically my purpose is adding bulk ip mac addresses for IP_MAC addresses binding.
I placed 360 entries in the configuration file
Like:
----------------------------------------------
edit 1 set ip 10.10.16.51 set mac 10:7e:DD:11:03:10 set description "1"
next
-
-
-
-
edit 200 set ip 10.10.16.251 set mac 10:7e:aa:11:03:10 set description "h"
next
-
-
-
-
edit 360 set ip 10.10.17.155 set mac 10:7e:aa:11:03:10 set description "h"
next
end
-------------------------------------------------
like above i manually added 360 added entries directly to back_up_ configuration file, in the following format, it is uploading ip_mac address details successfully but it is uploading only 200 entries not more than that. i tried to restore the modified file again and again but whatever i could do, only 200 entries out of 360 uploaded, is there a way to to add full entries into the ip_mac binding database. or is that some kind of restriction in the firewall that it only adds 200 entries to the firewall please let me know work-around for this
either by directly modifying the firewall_configuration_back_up_file or by uploading the details through bulk CLI file.
for uploading bulk cli file, i think that i have to remove some parts of the following code but i don't know which one i should remove and which one i should retain.
config system dhcp server
edit 4
set forticlient-on-net-status disable
set default-gateway 10.10.56.1
set netmask 255.255.248.0
set interface "xyz"
config ip-range
edit 1
set start-ip 10.10.56.50
set end-ip 10.10.63.100
next
end
set timezone-option default
config reserved-address
edit 1
set ip 10.10.16.51
set mac 10:7e:DD:11:03:10
set description "1"
next
edit 2
set ip 10.10.16.52
set mac 00:8e:bd:78:5e:18
set description "2"
next
edit 3
set ip 10.10.16.53
set mac f8:62:e4:32:4d:75
set description "3"
next
-
-
-
edit 200
set ip 10.10.16.251
set mac 10:7e:aa:11:03:10
set description "h"
next
-
-
-
edit 360
set ip 10.10.17.155
set mac 10:7e:aa:11:03:10
set description "h"
next
end
set dns-server1 8.8.8.8
next
end
please someone help me on this.
Thanks
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
What model of firewall/branch of firmware?
Could definitely be a limit of some sort depending on model/firmware level.
Brent
Check out the Max value table (link for 5.2.7) - reserved IPs is limited to 200 entries until you get to the really big iron.
Edit: would be curious to know if the reserved addresses limit is total or just per DHCP server.
NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
I am using fortigate 200d. So that means that there is no work around to add more than 200 entries into the ip mac table. :(
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1688 | |
1087 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.