Skip to main content
Taniarto
New Member
May 3, 2017
Question

Unknown IP Address

  • May 3, 2017
  • 1 reply
  • 2970 views

Hi,

From the dashboard (Fortinet C100) I saw unknown IP Address that I don't have on my network. I want to  know who it is ? or what device it is? can any one tell me how?

 

thx,

 

Joe

    1 reply

    EMES
    New Member
    May 3, 2017

    You can probably jump into the CLI and run a #get system arp

     

    That may show you the MAC address of the device. It may be a device that has two IPs which you can then track down. Also you can try turning on device discovery on the interface where the IP originates from. This will only work if the firewall is the Layer 3 gateway for that network. You can do this from the CLI, only change the port1 to your interface:

     

    config system interface

    edit port1

    set device-identification enable

    end

     

    You can also enable that in the GUI using Network -> Interfaces -> port1 

    Now check the box for device identifcation and hit apply

     

    You should be able to browse to user & Device -> Device Inventory (in version 5.4) to view what the firewall has found. 

     

     

    I hope that helps.