FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Mohammed_Feroz
Article Id 249855
Description This article describes the various options for configuring the MAC address under a single MAC-based address object.
Scope FortiGate.
Solution

MAC address can be added below:

  1. Adding a single MAC address.
  2. Adding a range of MAC addresses.
  3. Adding a wildcard MAC address.

 

To add MAC addresses from the GUI, select the plus sign under the MAC address.

 

address.png

 

To add MAC addresses from the CLI, separate the addresses with a quotation mark or use the append command to add another MAC address entry.

 

cli.png

 

In cases where the network is managed based on the source MAC address, it can be a tedious process to add a MAC address-based object for each user and possibly call it under a group.

The above options can be helpful to manage the group under a single address object.

 

mac object.jpg

 

In the above example, 2 MAC-based address objects have been configured.

 

  1. Office_PC: that includes one MAC address, a Range of MAC addresses, and a wildcard of the MAC address.
  2. mac_block: a complete wildcard MAC address, so it can be used to block all MAC addresses in a deny policy.
 
mac policy .jpg