Fortigate 300 2.8以上版本如何實現(xiàn)IP/Mac綁定？

liugr3988

如題\n\n[ 本帖最后由 liugr3988 于 2008-8-30 21:56 編輯 ]

liugr3988

1、在防火墻上定義對應(yīng)的IP－mac對應(yīng)表\r\nconfig firewall ipmacbinding table\r\n    edit 1\r\n        set ip 192.167.1.111\r\n        set mac 00:0a:eb:7c:16:05\r\n        set name \"robbie\"\r\n        set status enable\r\n    next\r\nend\r\n2、在防火墻上定義ip－mac綁定的規(guī)則\r\nconfig firewall ipmacbinding setting\r\n    set bindthroughfw enable ( 符合ip－mac綁定表允許通過防火墻，缺省生效)\r\n    set bindtofw enable      （符合ip－mac綁定表允許管理防火墻）\r\nend\r\n \r\n3、在防火墻對應(yīng)的接口生效ip－mac綁定規(guī)則\r\nFortigate-60 # config sys inter\r\n(interface)# edit internal\r\n(internal)# set ipmac \r\n disable    disable setting\r\n enable     enable setting\r\n \r\n(internal)# set ipmac en\r\n(internal)# end\r\n修改主機(jī)IP，后做測試

liugr3988

:wink: IP/MAC binding on the FortiGate unit has two distinct purposes:\r\n1.        (FIREWALL) anti-spoofing \r\n2.        (DHCP) address reservation\r\nFor FortiOS v2.80\r\n•        To configure anti-spoofing IP/MAC binding for the firewall, use the CLI command config firewall ipmacbinding. \r\n•        To configure IP/MAC binding for DHCP address reservation go to System > DHCP > IP/MAC Binding or use the CLI command config system dhcp reserved-address. \r\nNote: Since there is no DHCP configuration in Transparent mode, IP/MAC binding is not displayed in the web-based manager.\r\nFor FortiOS v3.0\r\n•        To configure anti-spoofing IP/MAC binding for the firewall, use the CLI command config firewall ipmacbinding. \r\n•        To configure IP/MAC binding for DHCP address reservation use the CLI command config system dhcp reserved-address.

liugr3988

:wink:\r\n單位防火墻配置，需要用到這方面的問題，找了一個下午，沒找到答案，故寫出這個帖子，請求幫助，同時自己接著找。最終給找到了，為方便他人，將找到的答案寫在上面。希望各位不要認(rèn)為我是在作弄人。謝謝！\n\n[ 本帖最后由 liugr3988 于 2008-8-30 22:11 編輯 ]

chinaciscoccie

fortigate是nS出來的。不知道fortigate下的cli也有命令綁定的功能？