One mac address many local iodresses - device detection

[vusal_d]

Can someone explain why this mac address appears every 5 seconds. It is source ip always different. It stopped appearing after I disabled “Device Detection” on LAN interface.

[lobstercreed · Accepted solution]

Hi Vusal,

Same MAC address on same LAN port (port10) every time, right?  This is the MAC address of whatever router sits inside your firewall.  Since all traffic routes through it, it's the only device the FortiGate has Layer 2 visibility to see.  So whether it's forwarding a packet from 1.2.3.4 or 5.6.7.8 it will always present the same MAC address on the interface facing the firewall.  This is elementary OSI model stuff.  :)

- Daniel

[vusal_d]

lobstercreed wrote:

Hi Vusal,

Same MAC address on same LAN port (port10) every time, right?  This is the MAC address of whatever router sits inside your firewall.  Since all traffic routes through it, it's the only device the FortiGate has Layer 2 visibility to see.  So whether it's forwarding a packet from 1.2.3.4 or 5.6.7.8 it will always present the same MAC address on the interface facing the firewall.  This is elementary OSI model stuff.  :)

- Daniel

Thank you for explanation Daniel. Very helpful

[jubaa006]

So how i can fix it to see all mac address for all source ips ?