I have a Fortinet FG-60E firewall running FortiOS v6.0.1. A wireless access point is connected to one of the ports (internal3). There are currently no other clients connected to the wireless access point.
Is there a FortiOS command (or commands) that will tell the MAC address of the wireless access point?
get system arp almost does what I want, except it doesn't specify the port number of the internal interface. You can see from this snippet of output:
FGT60E4Q16045123 # get system arp Address Age(min) Hardware Addr Interface 10.0.1.87 0 00:0c:29:60:8c:f4 internal 10.0.1.20 125 5c:aa:fd:1b:b5:5a internal 10.0.1.73 0 00:0c:29:a4:29:9e internal 10.0.1.96 1 00:0c:29:76:7c:2b internal 10.0.1.13 0 5c:70:a3:7d:28:82 internal 10.0.1.6 0 00:11:32:0f:ab:f9 internal 10.0.1.89 0 00:0c:29:c8:98:c4 internal 10.0.1.22 104 b8:e9:37:5f:ac:2c internal 10.0.1.75 0 00:0c:29:05:ab:42 internal 10.0.1.98 0 00:0c:29:05:53:49 internal
The interface is listed as "internal" and not "internal1", "internal2", etc.. The "internal" interface has 7 ports:
The output from
diag switch-controller dump mac-hosts-switch-port does not include the port number. Here's an example:
vd root/0 f0:9f:c2:30:d5:76 gen 159 req TOUS/2e created 69257s gen 20 seen 45873s internal gen 79 ip 192.168.1.1 src arp host 'OpenWrt' src dhcp vd root/0 00:0c:29:76:7c:2b gen 1853 req TOU/2c created 2190525s gen 47 seen 318s internal gen 1447 ip 10.0.1.96 src arp host 'cdh06' src dhcp server http
The first entry is the device I'm trying to identify via Fortinet CLI. As far as I can tell, there's no way to associate the MAC with a particular port on the firewall.