How to block MAC Adress

Forum|Forum|7 years ago
November 30, 2018
1 reply
13293 views

Hi all,

I've got a problem.

I want to block mac adress of PC in LAN network.

On Fortigate 100E isn't DHCP server.

Forti OS 5.6.4

I created a device with specific mac adress.

I added this device to a device group (blocked macs) , and finally i used this group in IP v4 policy :

[ul]

Incoming Interface: LAN

Source Address: all

Outgoing Interface: wan (your internet connection)

Source : "BlockedMac" and subnet 10.10.10.0/24

Service: All

Action: Deny[/ul]

But this not work.

Any ideas ?

THX

Best answer by Dave_Hall

Hi Regi.

Firewall policies are executed from top-to-bottom - have you placed the block device rule somewhere near the top of the firewall list?

lobstercreed

New Member

You stated the FortiGate is not the DHCP server, but is it the default gateway for the subnet where the host you want to block resides? If there is any other L3 device between the FortiGate and the blocked host, it simply cannot be done.

What you described cannot be done if: BAD_GUY <--> SOME_ROUTER <--> FGT <--> WAN

What you described should work if: BAD_GUY <--> FGT <--> WAN

However, even in the latter scenario, it will only prevent Internet-bound traffic. It won't truly block the device...i.e. it wouldn't prevent internal traffic.

Dave_HallAnswer

New Member

Hi Regi.

Firewall policies are executed from top-to-bottom - have you placed the block device rule somewhere near the top of the firewall list?

RegiLuAuthor

New Member

Hi Dave,

Yes, the policy is near top of the tree.

But I think the problem , in this case , is the router beetween BGUY and FGT , how wrote lobstercreed.

Any ideas : how, in this scenario (BGUY - ROUTER - FGT - WAN) , block this guy from any traffic internet and internal?

Sign up

Login with SSO

Login to the community

Login with SSO