In this article we describe how to do IP-MAC binding on a Fortigate firewall. We will build IP-MAC binding in 3 stages from the Fortinet CLI console. You may also connect via telnet or SSH if you prefer.

1. Enable IP-MAC binding on the interface, example:
Config system interface
edit internal
set ipmac enable
end

2. Configure firewall access and through-firewall IP-MAC binding:
config firewall ipmacbinding setting
set bindthroughfw enable
set bindtofw enable
set undefinedhost allow
end

3. Create the IP-MAC binding table:
config firewall ipmacbinding table
edit 1
set ip 192.168.1.2
set mac 00:10:F3:04:7A:4C
set name xxx_server_pc
set status enable
end

For more than 1-2 machines you can save a TXT file with bulk entries and import via “Import bulk cli commands”.

Good luck,