Fortinet white logo
Fortinet white logo

CLI Reference

7.2.2

config firewall addrgrp

config firewall addrgrp

Configure IPv4 address groups.

Syntax

config firewall addrgrp
    edit <name>
        set category [default|ztna-ems-tag|...]
        set comment {var-string}
        set exclude [enable|disable]
        set exclude-member <name1>, <name2>, ...
        set member <name1>, <name2>, ...
        set type [default|folder]
    next
end

Parameters

Parameter

Description

Type

Size

Default

category

Address group category.

option

-

default

Option

Description

default

Default address group category (cannot be used as ztna-ems-tag/ztna-geo-tag in policy).

ztna-ems-tag

Members must be ztna-ems-tag group or ems-tag address, can be used as ztna-ems-tag in policy.

ztna-geo-tag

Members must be ztna-geo-tag group or geographic address, can be used as ztna-geo-tag in policy.

comment

Comment.

var-string

Maximum length: 255

exclude

Enable/disable address exclusion.

option

-

disable

Option

Description

enable

Enable address exclusion.

disable

Disable address exclusion.

exclude-member <name>

Address exclusion member.

Address name.

string

Maximum length: 79

member <name>

Address objects contained within the group.

Address name.

string

Maximum length: 79

name

Address group name.

string

Maximum length: 79

type

Address group type.

option

-

default

Option

Description

default

Default address group type (address may belong to multiple groups).

folder

Address folder group (members may not belong to any other group).

config firewall addrgrp

config firewall addrgrp

Configure IPv4 address groups.

Syntax

config firewall addrgrp
    edit <name>
        set category [default|ztna-ems-tag|...]
        set comment {var-string}
        set exclude [enable|disable]
        set exclude-member <name1>, <name2>, ...
        set member <name1>, <name2>, ...
        set type [default|folder]
    next
end

Parameters

Parameter

Description

Type

Size

Default

category

Address group category.

option

-

default

Option

Description

default

Default address group category (cannot be used as ztna-ems-tag/ztna-geo-tag in policy).

ztna-ems-tag

Members must be ztna-ems-tag group or ems-tag address, can be used as ztna-ems-tag in policy.

ztna-geo-tag

Members must be ztna-geo-tag group or geographic address, can be used as ztna-geo-tag in policy.

comment

Comment.

var-string

Maximum length: 255

exclude

Enable/disable address exclusion.

option

-

disable

Option

Description

enable

Enable address exclusion.

disable

Disable address exclusion.

exclude-member <name>

Address exclusion member.

Address name.

string

Maximum length: 79

member <name>

Address objects contained within the group.

Address name.

string

Maximum length: 79

name

Address group name.

string

Maximum length: 79

type

Address group type.

option

-

default

Option

Description

default

Default address group type (address may belong to multiple groups).

folder

Address folder group (members may not belong to any other group).