Uploading cli bulk command file is giving me the error Need help

[lohith]

Hello,

I am having the problem with uploading the following  CLI bulk command file, below is the cli code i am unable to identify the exact reason for error please let me know what part of the code is exactly causing the problem, the following part of the code i copied from the from  fortinet_firewall_configuration back_UP_file.

Basically my purpose is adding bulk ip mac addresses for IP_MAC addresses binding.

I placed 360 entries in the configuration file

Like:

----------------------------------------------

edit 1         set ip 10.10.16.51         set mac 10:7e:DD:11:03:10         set description "1"

next

-

-

-

-

edit 200         set ip 10.10.16.251         set mac 10:7e:aa:11:03:10         set description "h"

next

-

-

-

-

edit 360         set ip 10.10.17.155         set mac 10:7e:aa:11:03:10         set description "h"

next

end

-------------------------------------------------

like above i manually added 360 added entries  directly to back_up_ configuration file, in the following format, it is uploading ip_mac address details successfully but it is uploading only 200 entries not more than that. i tried to restore the modified file again and again but whatever i could do, only 200 entries out of 360 uploaded, is there a way to to add full entries into the ip_mac binding database. or is that some kind of restriction in the firewall that it only adds 200 entries to the firewall please let me know work-around for this

either by directly modifying the firewall_configuration_back_up_file or by uploading the details through bulk CLI file.

for uploading bulk cli file, i think that i have to remove some parts of the following code but i don't know which one i should remove and which one  i should retain.

config system dhcp server
 edit 4
        set forticlient-on-net-status disable
        set default-gateway 10.10.56.1
        set netmask 255.255.248.0
        set interface "xyz"
            config ip-range
                edit 1
                    set start-ip 10.10.56.50
                    set end-ip 10.10.63.100
                next
            end
        set timezone-option default
            config reserved-address
      edit 1
        set ip 10.10.16.51
        set mac 10:7e:DD:11:03:10
        set description "1"
     next
    edit 2
        set ip 10.10.16.52
        set mac 00:8e:bd:78:5e:18
        set description "2"
     next

    edit 3
        set ip 10.10.16.53
        set mac f8:62:e4:32:4d:75
        set description "3"
    next

    -

    -

    -

    edit 200
        set ip 10.10.16.251
        set mac 10:7e:aa:11:03:10
        set description "h"

      next

     -

     -

     -

    edit 360
        set ip 10.10.17.155
        set mac 10:7e:aa:11:03:10
        set description "h"

      next

    end
    set dns-server1 8.8.8.8
    next
end

please someone help me on this.

Thanks

[BWiebe]

What model of firewall/branch of firmware?

Could definitely be a limit of some sort depending on model/firmware level.

Brent

[Dave_Hall]

Check out the Max value table (link for 5.2.7) - reserved IPs is limited to 200 entries until you get to the really big iron.

Edit: would be curious to know if the reserved addresses limit is total or just per DHCP server.

[lohith]

I am using fortigate 200d. So that means that there is no work around to add more than 200 entries into the ip mac table. :(