Fortiview-does not correctly identify macaddres/soucedevice, shows all with mac from core

Forum|Forum|8 years ago
June 7, 2018
4 replies
7307 views

Hello guys, I have a FG 200D, version 5.6.2, it and my servers are in the same vlan 0. The other machines in sectors are in their vlans 1,2,3,4 ...

When I use Fortiview, it shows the IP but does not correctly identify the mac. I see you're bringing in the mac of the switch core that does the routing of the network.

Fortiview.jpg

Is there any configuration that can be made to work correctly, without having to take the routing of the switch core to play on top of the FG?

hugs

Fortiview.jpg

Nicholas_Doropoulos

New Member

What if you run get sys arp on the cli? Would it show the mac addresses there correctly?

neonbit

New Member

To see the MAC and proper device identification the devices need to be 'directly' connected to the FortiGate. If your switch is doing routing then the FGT will only see the switches MAC address.

Ideally you would replace the switch with a FortiSwitch to get full visibility on your network and allow much greater centralised control of those devices.

Alternatively you could install FortiClient on the servers and have them register to the the FortiGate to get the correct information.