Created on
06-28-2006
12:00 AM
Edited on
02-06-2022
12:50 PM
By
msanjaypadma
Article
The virtual MAC address is determined based on following formula on virtual cluster 1:
00-09-0f-09-<group-id_hex>- (<vcluster_integer> <idx>)
where,
<group-id_hex> is the HA Group ID for the cluster converted to hexadecimal. The following table lists the virtual MAC address set for each group ID.
Integer Group ID | Hexadecimal Group ID |
---|---|
0 | 00 |
1 | 01 |
2 | 02 |
3 | 03 |
4 | 04 |
... | ... |
10 | 0a |
11 | 0b |
... | ... |
63 | 3f |
... | ... |
255 | ff |
<vcluster_integer> is 0 for virtual cluster 1 and 20 for virtual cluster 2. If virtual domains are not enabled, HA sets the virtual cluster to 1 and by default all interfaces are in the root virtual domain. Including virtual cluster and virtual domain factors in the virtual MAC address formula means that the same formula can be used whether or not virtual domains and virtual clustering is enabled.
<idx> is the index number of the interface. Interfaces are numbered from 0 to x (where x is the number of interfaces). Interfaces are numbered according to their has map order. The first interface has an index of 0. The second interface in the list has an index of 1 and so on
For example,
When the HA group ID is 0 (i.e default) & the mgmt1 phy_index= 0, itf_name= mgmt1, Physical mac=e0.23.ff.a0.98.04,
then the Virtual-mac=00.09.0f.09.00(group ID is 0).00(vcluster_integer for vcluster 1 is "0" and index of the interface is 0)
If the same interface is change to virtual cluster 2, the mac address should add 8 on the second last digit, i.e., add 80 in hexadecimal:
add 80 in hexadecimal: 00 -> 80
Therefore it is necessary to follow virtual mac address: 00.09.0f.09.00.80
Related Articles
Troubleshooting Tip: Verifying physical and HA Virtual MAC addresses of FortiGate interfaces
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/996579/cluster-virtual-mac-addresses
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.