Static MAC addresses
You can configure one or more static MAC addresses on an interface.
Starting in FortiSwitchOS 7.2.0, you can configure in the CLI whether packets with specific source static MAC address are allowed or dropped. By default, they are allowed.
Using the GUI:
- Go to Switch > MAC Entries.
- Select Add MAC Entry to create a new item.
- Select an interface and enter a value for MAC Address and VLAN.
- Select the Sticky checkbox if you want the MAC address to be persistent, even when the status of a FortiSwitch port changes (goes down or up).
- Select Add to create the MAC entry.
Using the CLI:
config switch static-mac
edit <sequence_number>
set action {allow | drop}
set description <optional_string>
set interface <interface_name>
set mac <static_MAC_address>
set type {sticky | static}
set vlan-id <VLAN_ID>
end
For example:
config switch static-mac
edit 1
set action drop
set description "first static MAC address"
set interface port10
set mac d6:dd:25:be:2c:43
set type static
set vlan-id 10
end