How to reserve IP addresses for FortiClient dial-in users when DHCP Over IPSec is used

[Jonathan_Body_FTNT]

Description
This solution is designed to help implement an IP lease reservation, a DHCP server feature which will allow the same dialer to always receive the same IP lease from the DHCP server.
Scope
All FortiClient users.
Solution

This feature can be enabled via the CLI of the FortiGate and is to be used to reserve an IP address for a specific client whether that be a regular Ethernet client or IPSec client, all FortiOS units allow 200 clients to be reserved in this way.

The FortiGate CLI syntax is as follows:

config system dhcp reserved-address
edit <name_str>
set ip <address_ipv4>
set mac <address_hex>
set type {regular | ipsec}

Examples

The following example is used to add a reserved address named client_1 consisting of IP address
192.168.110.3 and MAC address 00:09:0F:0A:01:BC for a regular Ethernet connection:

config system dhcp reserved-address
edit client_1
set ip 192.168.110.3
set mac 00:09:0F:0A:01:BC
set type regular
end

The following example is used to add a reserved address named client_1 consisting of IP address
192.168.110.4 and MAC address 00:09:0F:0A:01:BC for an IPSec connection:

FG600B3908600699 (reserved-address) # show
config system dhcp reserved-address
edit "client"
set ip 192.168.110.4
set mac 00:09:0f:0a:01:bc
set type ipsec
next
end