Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
nealdunne
New Contributor

FortiGate MAC address table size

Hi all

 

I have recently purchased a pair of FortiGate 240D but am concerned about the following limit in the maximum values document:

 

MAC address table size - 200

 

I plan to run some wireless access points directly into the switch ports of the Fortigates so there will be more than 200 wireless clients and MAC addresses that the unit will need to know about (these will be dynamic ARP entries, not statically defined).

 

Can anyone clarify what exactly the limit above refers to?

 

Thanks

1 Solution
vjoshi_FTNT
Staff
Staff

Hello,

 

There is an option to create a static MAC table on Fortigate. The table can hold up to 200 entries.

 

This command is available in Transparent mode only.

 

Command Syntax: config system mac-address-table edit <mac-address_hex> set interface <if_name> set reply-substitute <mac-address_hex> end

 

So, the MAC address table is referring to the above, nothing about the Wireless clients.

 

Hope that helps

View solution in original post

5 REPLIES 5
ede_pfau
Esteemed Contributor III

Relax...is says "ARP Table size=10240" for the 200D series.

 

Maybe someone from FTNT can comment on the meaning of "MAC address table size" as it is distinct from "DHCP Reserved addresses", the only other place where a FGT deals with MAC addresses.


Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
gschmitt
Valued Contributor

ede_pfau wrote:

Maybe someone from FTNT can comment on the meaning of "MAC address table size" as it is distinct from "DHCP Reserved addresses", the only other place where a FGT deals with MAC addresses.

AFAIK Mac Tables are used by switches, maybe it just means the table the internal switch can hold?

vjoshi_FTNT
Staff
Staff

Hello,

 

There is an option to create a static MAC table on Fortigate. The table can hold up to 200 entries.

 

This command is available in Transparent mode only.

 

Command Syntax: config system mac-address-table edit <mac-address_hex> set interface <if_name> set reply-substitute <mac-address_hex> end

 

So, the MAC address table is referring to the above, nothing about the Wireless clients.

 

Hope that helps

ede_pfau
Esteemed Contributor III

@gschmitt:

That's what the ARP table is used for. So 10k entries for a FG-200D.

 

MAC address substitution is "nice to have" but IMHO rarely used. Must look up what it's meant for...


Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
nealdunne
New Contributor

Thanks for this - that answers my question!!

Top Kudoed Authors