How to block unknown mac address on fortigate software-switch?

[mmorcali]

Hi,

I create a software-switch and enabled DHCP server on it. I spesified the address range and created ip address assigment rules. I want to block unknown mac address. I added mac address - ip address reservetion. But implict rule action is assign ip. How can i change the ubknown mac address actionb to block?

 

[ozkanaltas · Accepted solution]

Hello @mmorcali ,

You can easily change implicit rule behavior with a right click. Do Right-click on the implicit rule, and after that select block options in the action menu. 

[mmorcali]

I overlooked it. Thank you

[mmorcali]

Hello

When dhcp is activated, unknown mac address does not receive ip. It is ok. But when an ip is set in the internal subnet, the device can access the internal network. How do I fix this?

[ozkanaltas]

Hello @mmorcali ,

Actually, this request is about the NAC solution. Because of that, you can't do anything with Fortigate.

But if your switch is FortiSwitch, Fortigate provides a basic NAC feature with FortiSwitch.

[mmorcali]

Ok.

Thank you