Where should you configure MAC notification traps on a supported switch?

For effective Layer 2 polling, MAC notification traps should be enabled on all switch ports where endpoints connect (access ports). However, they must be disabled on uplink ports (ports connecting to other switches, routers, or network infrastructure). Enabling MAC notifications on uplinks would cause the switch to send a trap for every MAC address learned from downstream devices, leading FortiNAC to incorrectly associate a large number of hosts with a single uplink port. This causes MAC flapping in the FortiNAC database and prevents accurate endpoint location tracking.

A. Linkup/linkdown traps are distinct from MAC notification traps. A port can remain active (link up) while multiple devices connect and disconnect behind it.

B. Enabling MAC notification traps on uplink ports is the opposite of the correct procedure and is a common cause of L2 polling issues.

C. Enabling traps on all ports is incorrect because it includes uplink ports, which must be excluded to ensure accurate host-to-port mapping.

1. FortiNAC 7.6.0 Administration Guide, page 30, "L2 Polling (SNMP)" section. The guide states, "MAC notification traps should be enabled on all ports except for the uplink ports."

2. FortiNAC Network Device Configuration Guide 7.6.0, (e.g., Cisco IOS Switches section, page 17). The guide provides commands and explicitly notes to apply them to access ports and not to apply the MAC notification configuration to trunk/uplink ports.