Skip to main content
eburkon
eburkon
New Member
March 17, 2021
Question

Device Identification

  • March 17, 2021
  • 1 reply
  • 3714 views

Hi there,

 

in some network segment I have a bunch of survailance cams.

If I look in the device inventory on the Fortigate (FW Version 6.4.4) about two third show

the Device Name as configured in the device. The others show just the MAC address.

We triple checked that the config is identical on all the client devices but the situation

stays just the same.

 

How does the fortigate retreive this device name?

 

Is it possible that the naming is done just once at initial detection?

How can I remove a detected device and let it be detected again?

 

Thanks

   Ekkehard

 

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    March 17, 2021

    It uses many ways to collect information about a connected device. Below is my 50e detected Macbook Air. As you can see in "src" section, the info is from arp, dns queries, http handshakes:

     

    g50e-utm (root) # diag user device list hosts   vd root/0  e0:ac:cb:5e:6c:6a  gen 441  req OUA/34     created 2541268s  gen 45  seen 39729s  fap221b  gen 388     ip 192.168.5.2  src arp     hardware vendor 'Apple'  src http  id 540  weight 220     type 'Computer'  src http  id 540  weight 220     family 'MacBook \N1'  src dns  id 60  weight 200     os 'macOS'  src http  id 540  weight 220     software version '10.15.6'  src http  id 540  weight 220     host 'pas-MacBook-Air'  src dhcp -<snip>-

    Also, you can remove an entry with "del" option of this diag command.

     

    fg50e-utm (root) # diag user device del  ? <mac>    MAC address (xx:xx:xx:xx:xx:xx).

    Terms & ConditionsAccessibility statement