Description
This article describes how to resolve the error that occurs when trying to use wildcards in a MAC address in a FortiNAC policy: 'Invalid MAC Address' is displayed and it is not possible to save the NAC Policy.
Scope
FortiGate, FortiSwitch.
Solution
As of v7.0, it is possible to include the wildcard * characters in the FortiNAC Policy to match devices: Use wildcards in a MAC address in a NAC policy.
However, when creating in a NAC policy using wildcards, 'Invalid MAC Address' is seen.
In firmware v7.4.5 and v7.6.1, it is possible to configure wildcards in the NAC Policy GUI. However, in v7.0, the CLI can be used:
config user nac-policy
edit "Wildcard-MAC"
set mac "12:32:44:**:**:**"
next
end
