I am having trouble configuring mac filtering. I do not use DHCP but am trying to figure out a way to set a mac address on a port and create a rule to block that specific mac address. So when I try and send traffic to that port, I am unable to. Any thoughts?

  • You need to be more specific. What switch model(s) do you have? Also, understand that security using addresses (IP or MAC) is often worse than no security because you get a false sense of security. It is extremely easy for someone to change the MAC address on a device to be that of an allowed device. Please edit your question to include more information.
    – Ron Maupin
    Apr 24, 2019 at 13:38

1 Answer 1


I assume that you are using Fortigate firewall. You can use below codes for your work

config firewall ipmacbinding setting
set bindthroughfw {enable | disable}  - this is enabling IPMAC binding to get through a Firewall.
set bindtofw {enable | disable}  - this will check an IP MAC binding combination to allow access TO the firewall
set undefinedhost {allow | block} - this defines how the Firewall will treat traffic that has not been bound

config firewall ipmacbinding table
edit <index_int> - the number in the IP/MAC binding table
set ip <address_ipv4> - IP address value
set mac <address_hex>  - MAC address value
set name <name_str> - the name which may be used for this binding
set status {enable | disable} - is the binding now enabled

config system interface
edit <interface name>
set ipmac {enable | disable }   - enable to enable mac binding on interface

In addition to that if you want to config MAC address control you can use below article which published by fortinate

MAC control

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.