FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
athirat
Staff
Staff
Article Id 190935

Description

 
This article describes the commands to add the ip-mac address binding in both IPv4 and IPv6.
 
Scope
 
FortiGate.


Solution


Using the FortiGate CLI.

For IPv4:
 
config system arp-table
    edit %value%
        set interface <interface-name>
        set IP
        set mac
    end

For example:
 
config system arp-table
    edit  1
        set interface internal
        set ip 192.168.1.50
        set mac 00:50:5A:20:14:1E
    end

For IPv6:
 
diagnose ipv6 neighbor-cache add <interface-name>  <ipv6 address>  <mac-address>

For example:
 
diagnose ipv6 neighbor-cache add internal 2001:660:7220:83cf:172:20:0:102 78:48:59:61:52:3d

Verification of Configuration and troubleshooting:
To verify the existing ARP entries:
 
get sys ar
Address            Age(min)         Hardware Addr               Interface
192.168.1.50            -                00:50:5a:20:14:1e           internal  
<-----
10.1.1.2                     0               04:09:ff:09:c6:23            wan
 
diagnose ipv6 neighbor-cache list