Fortinet black logo

Administration Guide

IP ranges

Copy Link
Copy Doc ID 1ce38eeb-8119-11eb-9995-00505692583a:908189
Download PDF

IP ranges

Under the Passive Agent Configurations window, you have the option of limiting the FortiNAC to hosts from within selected IP address ranges. If you have multiple FortiNAC servers, you can control which servers respond to which user login/logout requests based on the IP address of the host connecting to the network. If IP address ranges are configured on this server it will only respond to requests from hosts within the range. If no IP address ranges are configured, the server responds to all requests.

Configure IP ranges

  1. Select Security Configuration > Passive Agent.
  2. Click IP Ranges.

  3. Click Add to add an IP address Range. Enter the Starting and Ending IP addresses and click OK.

  4. To modify a range, select it from the list and click Modify.
  5. To delete a range, select it from the list and click Delete.
  6. When the ranges are configured correctly, click Close.

Test IP addresses

Use Test to test an individual IP to make sure it is contained within one of the IP address ranges in the list.

  1. Select Security Configuration > Passive Agent.
  2. Click IP Ranges.
  3. Click Test.
  4. Enter a single IP address and click OK.
  5. A message is displayed indicating either IP Passed or IP Failed. If the IP failed, you must either update your ranges or configure the appropriate range on a different FortiNAC.

IP ranges

Under the Passive Agent Configurations window, you have the option of limiting the FortiNAC to hosts from within selected IP address ranges. If you have multiple FortiNAC servers, you can control which servers respond to which user login/logout requests based on the IP address of the host connecting to the network. If IP address ranges are configured on this server it will only respond to requests from hosts within the range. If no IP address ranges are configured, the server responds to all requests.

Configure IP ranges

  1. Select Security Configuration > Passive Agent.
  2. Click IP Ranges.

  3. Click Add to add an IP address Range. Enter the Starting and Ending IP addresses and click OK.

  4. To modify a range, select it from the list and click Modify.
  5. To delete a range, select it from the list and click Delete.
  6. When the ranges are configured correctly, click Close.

Test IP addresses

Use Test to test an individual IP to make sure it is contained within one of the IP address ranges in the list.

  1. Select Security Configuration > Passive Agent.
  2. Click IP Ranges.
  3. Click Test.
  4. Enter a single IP address and click OK.
  5. A message is displayed indicating either IP Passed or IP Failed. If the IP failed, you must either update your ranges or configure the appropriate range on a different FortiNAC.