MAC地址过滤Fortinet v6.0

Question

我在配置mac过滤时遇到了问题。我不使用DHCP，但我正在设法在端口上设置mac地址，并创建一个规则来阻止该特定的mac地址。所以当我试图把流量送到那个港口时，我是无法做到的。有什么想法吗？

Answer 1

我假设您正在使用Fortigate防火墙。您可以在您的工作中使用以下代码

config firewall ipmacbinding setting
set bindthroughfw {enable | disable}  - this is enabling IPMAC binding to get through a Firewall.
set bindtofw {enable | disable}  - this will check an IP MAC binding combination to allow access TO the firewall
set undefinedhost {allow | block} - this defines how the Firewall will treat traffic that has not been bound
end


config firewall ipmacbinding table
edit <index_int> - the number in the IP/MAC binding table
set ip <address_ipv4> - IP address value
set mac <address_hex>  - MAC address value
set name <name_str> - the name which may be used for this binding
set status {enable | disable} - is the binding now enabled
end

config system interface
edit <interface name>
set ipmac {enable | disable }   - enable to enable mac binding on interface
next
end

此外，如果您想配置MAC地址控件，可以使用下面由fortinate发布的文章

MAC控制