The quickest and easiest solution is to have the firewall's DHCP server do that for you.
DHCP can trivially do that for things that should not float around in the pool.
(I do this in both the Yamaha at $customer and with ISC-DHCPD at home.)
------------------------------
Still can't change my name from FL17!
------------------------------