Send SNMP traps for MAC address changes

You can now configure an SNMP trap so that you receive a message when a layer-2 MAC address has been added to, moved from or to, or deleted from a managed FortiSwitch port. This SNMP trap allows network administrators to monitor MAC address changes in real time, which strengthens overall network security.

This SNMP trap applies only to dynamic MAC addresses learned on the managed FortiSwitch port. MAC events can be lost by the hardware or software.

To send SNMP traps for MAC address changes:

1. Enable the SNMP trap for MAC address changes in a specific SNMP community.

   By default, this SNMP trap is disabled.

   config switch-controller snmp-community

   edit <SNMP_community_identifier>

   set name <SNMP_community_name>

   set events l2mac

   next

   end

   For example:

   config switch-controller snmp-community

   edit 1

   set name newsnmpcommunity

   set events l2mac

   next

   end

2. If the managed switchʼs port has set access-mode static, enable the logging of dynamic MAC address events for this interface. If the managed switchʼs port has set access-mode dynamic or set access-mode nac, the set log-mac-event command is hidden. By default, dynamic MAC address events are not logged. Enabling the logging for an interface reports when a dynamic MAC address is learned, moved, or deleted.

   config switch-controller managed-switch

   edit <FortiSwitch_serial_number>

   config ports

   edit <port_name>

   set log-mac-event enable

   next

   end

   next

   end

   For example:

   config switch-controller managed-switch

   edit S548DF5018000776

   config ports

   edit port10

   set log-mac-event enable

   next

   end

   next

   end