Troubleshooting Tip: Invalid MAC Address when using wildcards in a MAC Address in a NAC Policy

Description

This article describes how to resolve the error that occurs when trying to use wildcards in a MAC address in a FortiNAC policy: 'Invalid MAC Address' is displayed and it is not possible to save the NAC Policy.

Scope

FortiGate, FortiSwitch.

Solution

As of v7.0, it is possible to include the wildcard * characters in the FortiNAC Policy to match devices: Use wildcards in a MAC address in a NAC policy.

However, when creating in a NAC policy using wildcards, 'Invalid MAC Address' is seen.

In firmware v7.4.5 and v7.6.1, it is possible to configure wildcards in the NAC Policy GUI. However, in v7.0, the CLI can be used:

config user nac-policy
    edit "Wildcard-MAC"
         set mac "12:32:44:**:**:**"
    next
end