MAC devices
Non-802.1X compliant devices can be identified and accepted onto the network using MAC address authentication. See Non-compliant devices for more information.
Go to Authentication > User Management > MAC Devices to view a list of configured MAC devices. From here, MAC devices can be created, imported, exported, edited, and deleted.
The following information is shown:
| Create New | Create a new MAC-based authentication devices. |
| Import |
Import a list of MAC devices from a CSV file. |
|
Export |
Export a list of MAC devices to a CSV file. |
Once created/imported, MAC devices can be added to MAC user groups. See User groups for more information.
Device tracking
When enabled, this feature allows end users to self-register their devices, and to have those devices tracked, based on the device MAC address.
An unregistered device is granted restricted network access, and is redirected to the FortiAuthenticator guest portal. The user enters valid credentials, then the FortiAuthenticator detects the unregistered device and offers the user an option to register it. If the user registers the device, it becomes part of their authorized device group and the user is granted network access on that device (if the user does not register the device, they are redirected to the guest portal login page).
To link a device to a user configuration, create a new MAC-based authenticaation device entry under Authentication > User Management > MAC Devices, and enable This device belongs to a user. Similarly, it is possible to link a device from a user configuration. In either case, names and MAC addresses must be unique.
To fully benefit from this feature, you must use a FortiAuthenticator in conjunction with a FortiGate running FortiOS 6.0+.