Multiple mac address on single port

[vishal]

Hello All,

I have observed port connected to Fortigate showing multiple mac on switch. What could be the reason for it.

Pls note - fortigate is in High availability and I  have created 2 vdom.

Pfa 

[cravikumar]

Run the below command to check the mac addresses of the ports.

diagnose hardware deviceinfo nic <nic name>

Mac address that starts with 00.09.0f - could be ha's virtual mac address.

Refer to the links below.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Verifying-physical-and-HA-Virtual-MAC-addr...
https://community.fortinet.com/t5/FortiGate/Technical-Tip-HA-Cluster-virtual-MAC-addresses/ta-p/1942...

[vishal]

Virtual mac address would be same or differ on both unit if I issue below command

 diagnose hardware deviceinfo nic <nic

name>.

Also i have multi vdom created in my fortigate. How would virtual mac address assign in this case

[AEK]

Virtual MACs are only on the active node.

Each VDOM has its own set of virtual MAC addresses so they don't conflict with other VDOM.

See below link there is a section for multiple VDOMs.

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/564710/cluster-virtual-mac-a...

[AEK]

Hi Vishal

One is the physical MAC address of the port and one is the virtual MAC address.

The virtual MAC is created only when you have HA configuration. This MAC is always on the active node and moves to the second node when a fail-over occurs .