Skip to main content
Heodrene
New Member
June 15, 2015
Question

Problem with MAC address publication

  • June 15, 2015
  • 4 replies
  • 6571 views

Hi all,

 

Since this morning I have a weird problem :( Some users complain that they can't surf from LAN to Internet. I found the problem : my default gateway is 192.168.0.254 (MAC : 00:09:0F:09:00:02) but when I type in a MSDOS the arp -a command, I see that the MAC is 00:09:0F:09:00:0B for the same IP 192.168.0.254.

 

Our fortigate Appliance has 3 hardware switchs :

- 1 : LAN (ports 1 & 2) ;

- 2 : DMZ (ports 3 & 4) ;

- 3 : PHONE (ports 5 & 6).

The bad MAC is from PHONE hardware switch.

 

I reboot Appliance = NOK

 

Version is 5.2.3build670.

 

Please help :)

 

Best regards,

 

Jacques

 

 

 

    4 replies

    ede_pfau
    SuperUser
    SuperUser
    June 15, 2015

    hello,

     

    are you 100% sure that your notebook is not connected to ports 5 or 6, as this would explain the situation.

    On another suspicion, can you disable Device indentification on the internal ports if you have that enabled at the moment? There are unconfirmed clues that DI interferes with DHCP in v5.2.3.

    Heodrene
    HeodreneAuthor
    New Member
    June 15, 2015

    :) Yes I'm sure.

    Furthermore, the IP address is not the same (2 différents subnets).

    The FortiGate is online since one month without any problem, this one appears now neither why nor how. I tried to downgrade in v5.2.2build642, the problem is the same.

     

    ede_pfau
    SuperUser
    SuperUser
    June 15, 2015

    I know this is some effort: could you downgrade to 5.0.12? I bet the issue is gone then.

    Heodrene
    HeodreneAuthor
    New Member
    June 15, 2015

    Before read your last post, I disabled devices identification = NOK

    I downgraded in v5.2.2 = NOK

    Then I upgraded again in v5.2.3 = new problem, no route between the different interfaces works.

     

    So, after a factory reset, I restore the last conf = NOK

    Then a new factory reset again and I copy/paste line-by-line our last configuration = OK

    For the moment, the issue [strike]is[/strike] are fixed...

    ... but I'd like to understand what happened...

     

    JohnAgora
    New Member
    February 19, 2016

    Hello,

     

    Did you have any answer on the topic? Maybe from the TAC?

     

    Thanks!