IPAM manage options

Interfaces with a LAN role, wireless network interfaces (vap-switch type), and FortiExtender LAN extension interfaces (lan-extension type) can also receive an IP address from an IPAM server without any additional configuration at the interface level.

See Interfaces for more information.

When a manage option is enabled, any interface that meets the specified criteria will automatically receive an IP address from IPAM. However, if this option is disabled, interfaces that meet the criteria will not be configured by IPAM. All manage options are disabled by default. The central FortiIPAM configuration can be overridden at the interface level.

To configure IPAM manage options in the GUI:

1. Go to Network > IPAM and select the IPAM Settings tab.

2. Configure the following settings:

   Option	Description
   Interfaces with LAN role	Enable/disable LAN interface address management by default.
   FortiAP SSIDs	Enable/disable FortiAP SSID address management by default.
   FortiExtender LAN extensions	Enable/disable FortiExtender LAN extension interface address management by default.

3. Click OK.

To configure IPAM manage options in the CLI:

config system ipam
    set manage-lan-addresses {enable | disable}
    set manage-lan-extension-addresses {enable | disable}
    set manage-ssid-addresses {enable | disable}
end

To override the central FortiIPAM configuration at the interface level:

config system interface
    edit <name>
        set ip-managed-by-fortiipam {enable | disable | inherit-global}
    next 
end

The default setting is to inherit from the global configuration (inherit-global) through the relevant manage option under config system ipam.

See Example 2: IPAM with automatically managed interfaces.