Skip to main content
vusal_d
New Member
February 4, 2019
Solved

One mac address many local iodresses - device detection

  • February 4, 2019
  • 2 replies
  • 6078 views

Can someone explain why this mac address appears every 5 seconds. It is source ip always different. It stopped appearing after I disabled “Device Detection” on LAN interface.

    Best answer by lobstercreed

    Hi Vusal,

     

    Same MAC address on same LAN port (port10) every time, right?  This is the MAC address of whatever router sits inside your firewall.  Since all traffic routes through it, it's the only device the FortiGate has Layer 2 visibility to see.  So whether it's forwarding a packet from 1.2.3.4 or 5.6.7.8 it will always present the same MAC address on the interface facing the firewall.  This is elementary OSI model stuff.  :)

     

    - Daniel

    2 replies

    lobstercreed
    New Member
    February 4, 2019

    Hi Vusal,

     

    Same MAC address on same LAN port (port10) every time, right?  This is the MAC address of whatever router sits inside your firewall.  Since all traffic routes through it, it's the only device the FortiGate has Layer 2 visibility to see.  So whether it's forwarding a packet from 1.2.3.4 or 5.6.7.8 it will always present the same MAC address on the interface facing the firewall.  This is elementary OSI model stuff.  :)

     

    - Daniel

    vusal_d
    vusal_dAuthor
    New Member
    February 9, 2019

    lobstercreed wrote:

    Hi Vusal,

     

    Same MAC address on same LAN port (port10) every time, right?  This is the MAC address of whatever router sits inside your firewall.  Since all traffic routes through it, it's the only device the FortiGate has Layer 2 visibility to see.  So whether it's forwarding a packet from 1.2.3.4 or 5.6.7.8 it will always present the same MAC address on the interface facing the firewall.  This is elementary OSI model stuff.  :)

     

    - Daniel

    Thank you for explanation Daniel. Very helpful

    jubaa006
    New Member
    March 18, 2023

    So how i can fix it to see all mac address for all source ips ?