Fortinet black logo

Handbook

Address groups

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:142024
Download PDF

Address groups

To create IPv6 address groups from existing IPv6 addresses - GUI

Your company has 3 internal servers with IPv6 addresses that it would like to group together for the purposes of a number of policies.

  1. Go to Policy & Objects > Addresses and select Create New > Address Group.
  2. Select IPv6 Group, and fill out the fields with the following information:
    Group NameWeb_Server_Cluster
    MembersWeb_Server-1

    Web_Server-2

    Web_Server-3
  3. Select OK.
To create IPv6 address groups from existing IPv6 addresses - CLI

config firewall addrgrp6

edit Web_Server_Cluster

set member Web_Server-1 Web_Server-2 Web_Server-3

end

To verify that the addresses were added correctly
  1. Go to Policy & Objects > Addresses. Check that the addresses have been added to the address list and that they are correct.
  2. From the CLI, enter the following commands:

config firewall addgrp6

edit <the name of the address that you wish to verify>

Show full-configuration

Address groups

To create IPv6 address groups from existing IPv6 addresses - GUI

Your company has 3 internal servers with IPv6 addresses that it would like to group together for the purposes of a number of policies.

  1. Go to Policy & Objects > Addresses and select Create New > Address Group.
  2. Select IPv6 Group, and fill out the fields with the following information:
    Group NameWeb_Server_Cluster
    MembersWeb_Server-1

    Web_Server-2

    Web_Server-3
  3. Select OK.
To create IPv6 address groups from existing IPv6 addresses - CLI

config firewall addrgrp6

edit Web_Server_Cluster

set member Web_Server-1 Web_Server-2 Web_Server-3

end

To verify that the addresses were added correctly
  1. Go to Policy & Objects > Addresses. Check that the addresses have been added to the address list and that they are correct.
  2. From the CLI, enter the following commands:

config firewall addgrp6

edit <the name of the address that you wish to verify>

Show full-configuration