06-21-2020 05:48 AM
I have FMC and want to assign specific IP to MAC address is this available
06-21-2020 05:53 AM
06-21-2020 06:04 AM
i want to assign ip to specific mac address to use them in Access policy to allow and block URLs
06-21-2020 06:19 AM
Ok, use DHCP reservation on your DHCP server to assign the same IP address to that MAC address, then use that IP address in your ACP.
Alternatively you could create ACP rules based on AD usernames or groups, which would be more scalable than IP address.
06-22-2020 12:44 AM
I dont have AD or DHCP server the FTD is my DHCP
06-22-2020 12:55 AM
06-21-2020 09:34 AM
Since DHCP Role is to dynamically allocate IP address - if you looking any ACP for this device.
1. you need to allocate fixed IP address reservation on DHCP
2. reboot the device and check new IP is effective.
3. Create an object with the static IP and make the ACP rule.
Another side - I do not see in FTD or ASA these features available in Checkpoint. (maybe I am ignorance to explore)
if your DNS and DHCP Setup correctly, you can use standard Hostname - BBHOST ( checkpoint resolves hostname into IP and take action on access policy).
Good feature if cisco can opt for this.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide