Hot!Show mac address by physical port

Author
greyes
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/08/24 07:27:30
  • Status: offline
2016/09/05 09:07:49 (permalink)
0

Show mac address by physical port

Hello
 
In cisco switches you are able to "show" mac address by port with "show mac address-table interface gigabitEthernet0/1" it is possible to do the same in a Fortigate appliance?
 
Thanks
#1

11 Replies Related Threads

    zhunissov4
    Gold Member
    • Total Posts : 256
    • Scores: 25
    • Reward points: 0
    • Joined: 2015/10/12 04:00:01
    • Status: offline
    Re: Show mac address by physical port 2016/09/05 20:29:50 (permalink)
    0
    Hello , 
     
    Of course Fortigate also can do it : 
     
    # get hardware nic wan1
     
    BR, A
    #2
    zlimmen
    Bronze Member
    • Total Posts : 43
    • Scores: 0
    • Reward points: 0
    • Joined: 2013/02/25 04:27:08
    • Status: offline
    Re: Show mac address by physical port 2016/09/06 00:27:42 (permalink)
    0
    Hi,
    how about to "see" the mac address where it is connected to?
    That would make my network "mapping" a lot easier.
     
     
    #3
    ede_pfau
    Expert Member
    • Total Posts : 6046
    • Scores: 480
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Show mac address by physical port 2016/09/06 01:11:25 (permalink)
    0
    Why not ask for the arp table right away?
    diag ip arp list
    get sys arp


    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #4
    zlimmen
    Bronze Member
    • Total Posts : 43
    • Scores: 0
    • Reward points: 0
    • Joined: 2013/02/25 04:27:08
    • Status: offline
    Re: Show mac address by physical port 2016/09/06 01:23:57 (permalink)
    0
    the problem with is that it does not say what NIC is connected to where.
    #5
    ede_pfau
    Expert Member
    • Total Posts : 6046
    • Scores: 480
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Show mac address by physical port 2016/09/06 01:37:39 (permalink)
    0
    AFAIK you can only see direct partner's MAC in LACP bundles.

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #6
    greyes
    New Member
    • Total Posts : 3
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/08/24 07:27:30
    • Status: offline
    Re: Show mac address by physical port 2016/09/06 06:34:38 (permalink)
    0
    Hello to all
     
    The previous doesn´t work for me, I´m looking for something like:
     
    **************************************************************************
    CISCO_SWITCH#sh mac address-table interface GigabitEthernet1/0/1
              Mac Address Table
    -------------------------------------------

    Vlan    Mac Address       Type        Ports
    ----    -----------       --------    -----
    CISCO_SWITCH#sh mac address-table interface GigabitEthernet1/0/24
              Mac Address Table
    -------------------------------------------

    Vlan    Mac Address       Type        Ports
    ----    -----------       --------    -----
     201    FFFF.FFFF.FFFF DYNAMIC     Gi1/0/24
     204    FFFF.FFFF.FFFF DYNAMIC     Gi1/0/24
    Total Mac Addresses for this criterion: 2
    CISCO_SWITCH#
     
    With this output I can know that there are 2 devices connected to that port in particular
    **************************************************************************
     
    **************************************************************************
    "get hardware nic wan1" display the port mac not the mac addresses that are connected to that port:
    FGT # get hardware nic wan1
    Driver Name     :Fortinet NP4Lite Driver
    Version         :1.0.0
    Admin           :up
    Current_HWaddr   FF:FF:FF:FF:FF:FF
    Permanent_HWaddr FF:FF:FF:FF:FF:FF
    Status          :up
    Speed           :1000
    Duplex          :Full
    Host Rx Pkts    :206674384
    Host Rx Bytes   :661200042
    Host Tx Pkts    :143102099
    Host Tx Bytes   :1883562834
    Rx Pkts         :399838866
    Rx Bytes        :934198213
    Tx Pkts         :273216779
    Tx Bytes        :2646117299
    rx_buffer_len   :2048
    Hidden          :No
    cmd_in_list     : 0
    promiscuous     : 1
    **************************************************************************
     
    **************************************************************************
    FGT (VDOM_X) # get sys arp
    or
    FGT #get sys arp
    display all mac addresses but "Interface" column only show logical port not physical

    Address    Age(min)    Hardware Addr    Interface
    192.168.2.152    0    FF:FF:FF:FF:FF:FF    Internal_2
    192.168.2.155    1    FF:FF:FF:FF:FF:FF    Internal_2
    192.168.2.156    0    FF:FF:FF:FF:FF:FF    Internal_2
    192.168.2.160    0    FF:FF:FF:FF:FF:FF    Internal_2
    192.168.2.161    0    FF:FF:FF:FF:FF:FF    Internal_2
    192.168.2.163    1    FF:FF:FF:FF:FF:FF    Internal_2
    192.168.2.165    0    FF:FF:FF:FF:FF:FF    Internal_2
    192.168.2.183    4    FF:FF:FF:FF:FF:FF    Internal_2
    192.168.70.12    4    FF:FF:FF:FF:FF:FF    lan
    192.168.70.14    0    FF:FF:FF:FF:FF:FF    lan
    192.168.70.15    0    FF:FF:FF:FF:FF:FF    lan
    192.168.70.16    1    FF:FF:FF:FF:FF:FF    lan
    192.168.70.17    0    FF:FF:FF:FF:FF:FF    lan
    192.168.70.19    0    FF:FF:FF:FF:FF:FF    lan
    192.168.70.24    0    FF:FF:FF:FF:FF:FF    lan
    192.168.70.27    4    FF:FF:FF:FF:FF:FF    lan
    **************************************************************************
    #7
    FortiOSman
    Bronze Member
    • Total Posts : 36
    • Scores: 2
    • Reward points: 0
    • Joined: 2016/08/03 10:14:57
    • Status: offline
    Re: Show mac address by physical port 2016/09/07 08:18:25 (permalink)
    0
    Not sure about the CLI, but you can see what MACs are connected to the interface via the GUI. 
     
    On 5.2.X:
    User & Device > Device > Device Definitions.
     
    If nothing is showing you need to enable device identification on the interface.
    #config system interface
    #edit port1
    #set device-identification enable
     
     
    -FortiOSman,
    Up, Up, and Away!
     
    #8
    ede_pfau
    Expert Member
    • Total Posts : 6046
    • Scores: 480
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Show mac address by physical port 2016/09/07 10:04:51 (permalink)
    0
    If logical port is all we've got IMHO that's not that bad...I think they comprise physical and virtual ports (VLAN etc.).
    I'd combine the CLI command with a grep:
    get sys arp | grep port10


    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #9
    ottogre
    New Member
    • Total Posts : 1
    • Scores: 2
    • Reward points: 0
    • Joined: 2017/08/03 09:01:33
    • Status: offline
    Re: Show mac address by physical port 2017/11/29 09:35:00 (permalink)
    5 (1)
    diag switch mac-address list | grep -i mac

    MAC: f0:d5:bf:f0:23:50  VLAN: 1 Port: port17(port-id 17)
    MAC: 5c:b9:01:0c:0f:4e  VLAN: 1 Port: port8(port-id 8)
    MAC: 90:6c:ac:12:69:28  VLAN: 1 Port: internal(port-id 25)
    MAC: ac:d1:b8:26:dc:0c  VLAN: 1 Port: port17(port-id 17)
    MAC: 98:ee:cb:48:14:50  VLAN: 1 Port: port20(port-id 20)
    MAC: 98:ee:cb:48:15:90  VLAN: 1 Port: port17(port-id 17)
    MAC: 34:f3:9a:14:8c:91  VLAN: 1 Port: port17(port-id 17)
    MAC: 34:f3:9a:14:b2:f2  VLAN: 1 Port: port17(port-id 17)
    MAC: 2c:41:38:28:74:c7  VLAN: 1 Port: port10(port-id 10)
    MAC: 30:05:5c:b4:7c:11  VLAN: 1 Port: port21(port-id 21)
    MAC: c4:9a:02:76:80:b9  VLAN: 1 Port: port10(port-id 10)
    MAC: 98:ee:cb:48:16:5e  VLAN: 1 Port: port17(port-id 17)
    MAC: 98:ee:cb:48:16:62  VLAN: 1 Port: port18(port-id 18)
    MAC: 4c:cc:6a:79:f3:97  VLAN: 1 Port: port2(port-id 2)




    #10
    huutrung07
    New Member
    • Total Posts : 1
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/09/25 00:19:46
    • Status: offline
    Re: Show mac address by physical port 2018/09/25 00:29:05 (permalink)
    0
    Hello, i have Fortigate 200D connect with switch cisco 3750 layer 3, i  created vlans and dhcp server on cisco switch, using RIP routing to Fortigate. But i cant see arp or mac table on fortigate. how can forwarding arp or mac table on switch to Firewall ??
    thks 
    #11
    Stephen Roddick
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/08/30 08:10:40
    • Status: offline
    Re: Show mac address by physical port 2018/11/06 07:30:37 (permalink)
    0
    @huutrung07 You won't see the Cisco MAC or ARP Tables on your Fortigate with this setup.
     
    You say you've set up the Cisco as a layer 3 router not a layer 2 switch.  None of the MAC information will be passed to the Fortigate in a routed environment.
     
    S.
    #12
    Jump to:
    © 2019 APG vNext Commercial Version 5.5