Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
korwinau
New Contributor

Newbie trying to configure address group packet prioritization

Hi,

 

Newbie here trying to configure some basic prioritization though Traffic Shaping for a series of devices/endpoints.

 

I've created an address group for a handful of devices defined by MAC Address Range.  The problem I seem to be having is when assigning them as the Traffic Source under the Shaping Policy.  When attempting to save the policy setup with the group defined I get a fairly non descript error of "Entry not found.".  If I change the source to something predefined on the Fortigate it sails through no problem.  Any thoughts on what I'm missing here?

 

It's a 60E running on 6.2.

3 REPLIES 3
Armando_Gomez_Barrio
New Contributor III

hi,

 

I could see you configuration,

 

regards !

korwinau

Hi All,

 

Forgot to come back to this.  I managed to sort out the issue using IP based addresses rather than MAC based addresses.  There must be some kind of bug with the shaping policy component in 6.2 as the only thing that changed to get it working was the address type.

SecurityPlus

When I create addresses based on MAC addresses, in an address group, I don't seem to be able to find either the group or the addresses when creating a Traffic Shaping Policy, based on the traffic matching the Source. Can MAC address addresses not be used in this way? This approach seemed to be easier than to need to create IP address reservations and create IP address addresses. I would like to do this on 6.0, 6.2, and 6.4 FortiOS firewalls if possible.