When the FW is connected to the intranet through layer-3 devices, configuring across-Layer-3 MAC address identification enables the FW to obtain MAC addresses of intranet PCs.