Using IPAM
Interfaces configured for IPAM receive an address from the IPAM server's address/subnet pool. DHCP Server can be enabled using IPAM Rules, and the address range is populated by IPAM. Users can customize the address pool subnet and the size of a subnet that an interface can request.
Interfaces with a LAN role, wireless network interfaces (vap-switch type), and FortiExtender LAN extension interfaces (lan-extension type) can receive an IP address from an IPAM server without any additional configuration at the interface level. See IPAM manage options for more information
IPAM detects and resolves any IP conflicts that may occur on the interfaces that it manages. Users have the option to manually edit the interface or reallocate the IP. See IPAM automatic conflict resolution for more information.
To configure an interface to receive an IP address through IPAM in the GUI:
-
On the FortiGate, go to Network > Interfaces and edit the required port.
-
Set Role to match the Role option set in the IPAM Rules.
-
For Addressing Mode, select IPAM.
When the Addressing mode for an interface with a LAN role is set to IPAM, an additional option appears: When to use IPAM. This option is set to Always if the Interfaces with LAN role option under IPAM Settings is disabled, or to Inherit IPAM auto-manage settings option if Interfaces with LAN role is enabled. See IPAM manage options for more information.
-
For Network size, select the subnet as per your network requirements.
-
Click OK to save the settings.
To configure an interface to receive an IP address through IPAM in the CLI:
config system interface
edit <interface>
set ip-managed-by-fortiipam
set managed-subnetwork-size {4 | 8 | 16 | 32 | 64 | 128 | 256 | 512 | 1024 | 2048 | 4096 | 8192 | 16384 | 32768 | 65536}
next
end