config system address
Use this command to create the IPv4 address objects that you use to specify matching source and destination addresses in policies.
The following policies use address objects:
- Connection limit policies
- Firewall policies
- Link Load Balance policies
- QoS policies
Basic Steps
- Create address objects.
- Specify them when you configure your policies.
Before you begin:
- You must have read-write permission for system settings.
Syntax
config system address
edit <name>
set type {ip-netmask | ip-range}
set ip-netmask <ip&netmask>
set ip-min <class_ip>
set ip-max <class_ip>
next
end
|
type |
|
|
ip-netmask |
Specify a subnet using the address/mask notation. |
|
ip-min |
Specify the start of an address range. |
|
ip-max |
Specify the end of an address range. |
Example
FortiADC-docs # config system address
FortiADC-docs (address) # edit TEST-NET-1
Add new entry 'TEST-NET-1' for node 3800
FortiADC-docs (TEST-NET-1) # get
type : ip-netmask
ip-netmask : 0.0.0.0/0
FortiADC-docs (TEST-NET-1) # set ip-netmask 192.0.2.0/24
FortiADC-docs (TEST-NET-1) # next
FortiADC-docs (address) # edit TEST-NET-2
Add new entry 'TEST-NET-2' for node 3800
FortiADC-docs (TEST-NET-2) # set ip-netmask 198.51.100.0/24
FortiADC-docs (TEST-NET-2) # next
FortiADC-docs (address) # edit TEST-NET-3
Add new entry 'TEST-NET-3' for node 3800
FortiADC-docs (TEST-NET-3) # set ip-netmask 203.0.113.0/24
FortiADC-docs (TEST-NET-3) # end
FortiADC-docs #
