| Description |
This article describes the situation when traffic is not matching the policy filtered with the source mac address.
|
| Scope | FortiGate. |
| Solution |
- Make sure to enter the right mac address.
- To check the mac address on the pc, open the command prompt and enter 'ipconfig/all'.
- Go to Policy&Objects -> Addresses and check the mac address.
- Add the 'PC-MAC' address object to the firewall policy.
- Then, go to Network -> Diagnostics -> Packet Capture and apply the filter as follows.
- Capture traffic on the incoming interface of the firewall and filter for PC’s IP address.
- Download the pcap file and check for the source mac address.
- The source mac address is different from the PC’s mac address.
- If having an L3 switch between the pc and the FortiGate, it will change the source mac address and it will not be possible to use a filter by mac address.
Related document: |
