Empty ARP table - layer 2 issue
FortiFirewall-VM64-KVM # get system arp
Address Age(min) Hardware Addr Interface
FortiFirewall-VM64-KVM # diagnose sniffer packet any 'arp' 4
Using Original Sniffing Mode
interfaces=[any]
filters=[arp]
0.870537 port1 out arp who-has 192.168.0.1 tell 192.168.0.33
1.910426 port1 out arp who-has 192.168.0.1 tell 192.168.0.33
4.818708 port1 out arp who-has 192.168.0.1 tell 192.168.0.33
5.830426 port1 out arp who-has 192.168.0.1 tell 192.168.0.33
FortiFirewall-VM64-KVM # di packet sniffer port1 'none' 4 0 l
command parse error before 'packet'
Command fail. Return code -61
I see fortilink ip-address different from my network which is from class-c, but I see fortilink has class-c ip addresss as seen below
config system interface
edit "port1"
set vdom "root"
set ip 192.168.0.33 255.255.255.0
set allowaccess ping https http
set type physical
set snmp-index 1
next
edit "fortilink"
set vdom "root"
set fortilink enable
set ip 10.255.1.1 255.255.255.0
set allowaccess ping fabric
set type aggregate
set lldp-reception enable
set lldp-transmission enable
set snmp-index 14
next
end
