I need some help with importing bulk Mac Addresses to either the Addresses under Policy&Objects/Addresses using a csv file. I have created a group where I would like the address to be imported to. It's a Fortigate 200F
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi @LourensL ,
I tried again. I didn't get any errors in my environment.
My bat file and group.txt looks like that.
Hello @LourensL ,
You can use CLI for bulk import. For example ;
config firewall address
edit "aa:bb:cc:dd:ee"
set type mac
set macaddr aa:bb:cc:dd:ee
next
edit "aa:bb:cc:dd:ef"
set type mac
set macaddr aa:bb:cc:dd:ef
next
end
You can resume like this.
Or I have a bat file for this kind of job. You can use it if you want.
@echo off
echo config firewall address
for /f " eol=# tokens=1-3 delims=," %%i in (mac.txt) do CALL :oneaddr %%i %%j
echo end
goto :EOF
:oneaddr
echo edit %1
echo set type mac
echo set set macaddr %2
echo next
mac.txt should be like this. The first column is the object name second is the mac address of the device.
device_name,aa:bb:cc:dd:ee
device_name,aa:bb:cc:dd:ff
You can run this bat file like this, mac_bulk.bat >> output.txt. You need to put both files in same folder(mac.txt,mac_bulk.bat)
For groups, you can use this bat.
@echo off
echo config firewall addrgrp
for /f " eol=# tokens=1-3 delims=," %%i in (group.txt) do CALL :oneaddr %%i %%j
echo end
goto :EOF
:oneaddr
echo edit %1
echo append member %2
echo next
group.txt should be like this.
group_name,object_name
group_name,object_name
Thank you @ozkanaltas ,
Sorry for the ignorance. How do I get the files onto the device?
Created on 04-24-2024 01:43 AM Edited on 04-24-2024 01:43 AM
Hello @LourensL ,
You can just paste output to CLI.
Hi @ozkanaltas
When trying to run the script for adding the Mac Adressess to the group I get this error
for /f " eol=# tokens=1-3 delims=," %%i in (group.txt) do CALL :oneaddr %%i %%j
%%i was unexpected at this time.
Hi @LourensL ,
I tried again. I didn't get any errors in my environment.
My bat file and group.txt looks like that.
@ozkanaltas Working 100% Thank you.
Hi @LourensL ,
Normally i don't have a script for that. But I changed my address group script for that. I think it will works.
You need to change "edit <YOUR_DHCP_ID>" area with your DHCP id.
@echo off
echo config system dhcp server
echo edit <YOUR_DHCP_ID>
echo config reserved-address
for /f " eol=# tokens=1-3 delims=," %%i in (mac.txt) do CALL :oneaddr %%i %%j
echo end
goto :EOF
:oneaddr
echo edit 0
echo set type mac
echo set mac %1
echo set action block
echo next
Your mac address txt (mac.txt) should be like this.
aa:bb:cc:dd:ee:ff
bb:cc:dd:ee:ff:gg
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1633 | |
1063 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.