Troubleshooting Tip: 'Possible MAC address Spoof' events do not trigger on the same switch

[cmaheu]

Description

This article describes how to handle Possible MAC address Spoof' events not triggering on the same switch.

Events are triggered when the same MAC address has been detected for more than the MAC address Spoof Time Delay value on two different devices simultaneously (default is five minutes). If it is needed to trigger this event when FortiNAC learns the same MAC address on the same device, the MAC address Spoof Time Delay (Minutes) should be set as 0.

Scope

FortiNAC 8.x.

Solution

Fixed in versions 8.8.8, 9.1.2 and above. 

For configuration instructions, see the Network device section in the 8.x Administration Guide or  9.x Administration Guide.

For a complete list of events, see the Events and alarms list section in the 8.x Administration Guide or 9.x Administration Guide.