Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

config system address

Use this command to create the IPv4 address objects that you use to specify matching source and destination addresses in policies.

The following policies use address objects:

  • Connection limit policies
  • Firewall policies
  • Link Load Balance policies
  • QoS policies
Basic Steps
  1. Create address objects.
  2. Specify them when you configure your policies.

 

Before you begin:

  • You must have read-write permission for system settings.

Syntax

config system address

edit <name>

set type {ip-netmask | ip-range}

set ip-netmask <ip&netmask>

set ip-min <class_ip>

set ip-max <class_ip>

next

end

type

  • ip-netmask: address block
  • ip-range: address range

ip-netmask

Specify a subnet using the address/mask notation.

ip-min

Specify the start of an address range.

ip-max

Specify the end of an address range.

Example

FortiADC-docs # config system address

FortiADC-docs (address) # edit TEST-NET-1

Add new entry 'TEST-NET-1' for node 3800

FortiADC-docs (TEST-NET-1) # get

type : ip-netmask

ip-netmask : 0.0.0.0/0

FortiADC-docs (TEST-NET-1) # set ip-netmask 192.0.2.0/24

FortiADC-docs (TEST-NET-1) # next

FortiADC-docs (address) # edit TEST-NET-2

Add new entry 'TEST-NET-2' for node 3800

FortiADC-docs (TEST-NET-2) # set ip-netmask 198.51.100.0/24

FortiADC-docs (TEST-NET-2) # next

FortiADC-docs (address) # edit TEST-NET-3

Add new entry 'TEST-NET-3' for node 3800

FortiADC-docs (TEST-NET-3) # set ip-netmask 203.0.113.0/24

FortiADC-docs (TEST-NET-3) # end

FortiADC-docs #

config system address

Use this command to create the IPv4 address objects that you use to specify matching source and destination addresses in policies.

The following policies use address objects:

  • Connection limit policies
  • Firewall policies
  • Link Load Balance policies
  • QoS policies
Basic Steps
  1. Create address objects.
  2. Specify them when you configure your policies.

 

Before you begin:

  • You must have read-write permission for system settings.

Syntax

config system address

edit <name>

set type {ip-netmask | ip-range}

set ip-netmask <ip&netmask>

set ip-min <class_ip>

set ip-max <class_ip>

next

end

type

  • ip-netmask: address block
  • ip-range: address range

ip-netmask

Specify a subnet using the address/mask notation.

ip-min

Specify the start of an address range.

ip-max

Specify the end of an address range.

Example

FortiADC-docs # config system address

FortiADC-docs (address) # edit TEST-NET-1

Add new entry 'TEST-NET-1' for node 3800

FortiADC-docs (TEST-NET-1) # get

type : ip-netmask

ip-netmask : 0.0.0.0/0

FortiADC-docs (TEST-NET-1) # set ip-netmask 192.0.2.0/24

FortiADC-docs (TEST-NET-1) # next

FortiADC-docs (address) # edit TEST-NET-2

Add new entry 'TEST-NET-2' for node 3800

FortiADC-docs (TEST-NET-2) # set ip-netmask 198.51.100.0/24

FortiADC-docs (TEST-NET-2) # next

FortiADC-docs (address) # edit TEST-NET-3

Add new entry 'TEST-NET-3' for node 3800

FortiADC-docs (TEST-NET-3) # set ip-netmask 203.0.113.0/24

FortiADC-docs (TEST-NET-3) # end

FortiADC-docs #