Fortinet black logo

Administration Guide

Static MAC addresses

Copy Link
Copy Doc ID d887c3dd-ee67-11ec-bb32-fa163e15d75b:287005
Download PDF

Static MAC addresses

You can configure one or more static MAC addresses on an interface.

Starting in FortiSwitchOS 7.2.0, you can configure in the CLI whether packets with specific source static MAC address are allowed or dropped. By default, they are allowed.

Using the GUI:
  1. Go to Switch > MAC Entries.
  2. Select Add MAC Entry to create a new item.
  3. Select an interface and enter a value for MAC Address and VLAN.
  4. Select the Sticky checkbox if you want the MAC address to be persistent, even when the status of a FortiSwitch port changes (goes down or up).
  5. Select Add to create the MAC entry.
Using the CLI:

config switch static-mac

edit <sequence_number>

set action {allow | drop}

set description <optional_string>

set interface <interface_name>

set mac <static_MAC_address>

set type {sticky | static}

set vlan-id <VLAN_ID>

end

For example:

config switch static-mac

edit 1

set action drop

set description "first static MAC address"

set interface port10

set mac d6:dd:25:be:2c:43

set type static

set vlan-id 10

end

Static MAC addresses

You can configure one or more static MAC addresses on an interface.

Starting in FortiSwitchOS 7.2.0, you can configure in the CLI whether packets with specific source static MAC address are allowed or dropped. By default, they are allowed.

Using the GUI:
  1. Go to Switch > MAC Entries.
  2. Select Add MAC Entry to create a new item.
  3. Select an interface and enter a value for MAC Address and VLAN.
  4. Select the Sticky checkbox if you want the MAC address to be persistent, even when the status of a FortiSwitch port changes (goes down or up).
  5. Select Add to create the MAC entry.
Using the CLI:

config switch static-mac

edit <sequence_number>

set action {allow | drop}

set description <optional_string>

set interface <interface_name>

set mac <static_MAC_address>

set type {sticky | static}

set vlan-id <VLAN_ID>

end

For example:

config switch static-mac

edit 1

set action drop

set description "first static MAC address"

set interface port10

set mac d6:dd:25:be:2c:43

set type static

set vlan-id 10

end