How the virtual MAC address is determined
The virtual MAC address is determined based on following formula:
00-09-0f-09-<group-id_hex>-<vcluster_integer><idx>
where
<group-id_hex> is the HA Group ID for the cluster converted to hexadecimal.
Table 58 lists the virtual MAC address set for each group ID.
Table 58: HA group ID in integer and hexadecimal format
Integer Group ID | Hexadecimal Group ID |
0 | 00 |
1 | 01 |
2 | 02 |
3 | 03 |
4 | 04 |
... | ... |
10 | 0a |
11 | 0b |
... | ... |
63 | 3f |
... | ... |
255 | ff |
<vcluster_integer> is 0 for virtual cluster 1 and 2 for virtual cluster 2. If virtual domains are not enabled, HA sets the virtual cluster to 1 and by default all interfaces are in the root virtual domain. Including virtual cluster and virtual domain factors in the virtual MAC address formula means that the same formula can be used whether or not virtual domains and virtual clustering is enabled.
<idx> is the index number of the interface. Interfaces are numbered from 0 to x (where x is the number of interfaces). Interfaces are numbered according to their has map order. See
“Interface index and display order”. The first interface has an index of 0. The second interface in the list has an index of 1 and so on.
| Only the <idx> part of the virtual MAC address is different for each interface. The <vcluster_integer> would be different for different interfaces if multiple VDOMs have been added. |
| Between FortiOS releases interface indexing may change so the virtual MAC addresses assigned to individual FortiGate interfaces may also change. |