Fortigate Firewall IP/MAC binding 功能

自己以前寫過的一篇範例, 說明如何使用Firewall的IP/MAC Binding功能。

This example shows how to add and enable an IP/MAC entry to the IP/MAC binding table.

config firewall ipmacbinding table
edit 1
set ip 172.16.44.55
set mac 00:10:F3:04:7A:4C
set name RemoteAdmin
set status enable
end

This example shows how to enable IP/MAC binding going to and going through the firewall, and block
undefined hosts (IP/MAC address pairs).

config firewall ipmacbinding setting
set bindthroughfw enable
set bindtofw enable
set undefinedhost block
end

enable ipmac on interface

config system interface
edit internal

set ipmac enable