Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.4.0
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    firewall address

    Configure IPv4 addresses.

      config firewall address
      Description: Configure IPv4 addresses.
      edit <name>
          set uuid {uuid}
          set subnet {ipv4-classnet-any}
          set type [ipmask|iprange|...]
          set sub-type [sdn|clearpass-spt|...]
          set clearpass-spt [unknown|healthy|...]
          set start-mac {mac-address}
          set end-mac {mac-address}
          set start-ip {ipv4-address-any}
          set end-ip {ipv4-address-any}
          set fqdn {string}
          set country {string}
          set wildcard-fqdn {string}
          set cache-ttl {integer}
          set wildcard {ipv4-classnet-any}
          set sdn {string}
          set fsso-group <name1>, <name2>, ...
          set interface {string}
          set tenant {string}
          set organization {string}
          set epg-name {string}
          set subnet-name {string}
          set sdn-tag {string}
          set policy-group {string}
          set comment {var-string}
          set associated-interface {string}
          set color {integer}
          set filter {var-string}
          set sdn-addr-type [private|public|...]
          set obj-id {var-string}
          config list
              Description: IP address list.
              edit <ip>

              next
          end
          config tagging
              Description: Config object tagging.
              edit <name>
                  set category {string}
                  set tags <name1>, <name2>, ...
              next
          end
          set allow-routing [enable|disable]
      next
  end

    config firewall address

    Parameter Name Description Type Size
    uuid Universally Unique Identifier (UUID; automatically assigned but can be manually reset). uuid Not Specified
    subnet IP address and subnet mask of address. ipv4-classnet-any Not Specified
    type Type of address.
    ipmask: Standard IPv4 address with subnet mask.
    iprange: Range of IPv4 addresses between two specified addresses (inclusive).
    fqdn: Fully Qualified Domain Name address.
    geography: IP addresses from a specified country.
    wildcard: Standard IPv4 using a wildcard subnet mask.
    dynamic: Dynamic address object.
    interface-subnet: IP and subnet of interface.
    mac: Range of MAC addresses.
    		 option -
    sub-type Sub-type of address.
    sdn: SDN address.
    clearpass-spt: ClearPass SPT (System Posture Token) address.
    fsso: FSSO address.
    ems-tag: FortiClient EMS tag.
    		 option -
    clearpass-spt SPT (System Posture Token) value.
    unknown: UNKNOWN.
    healthy: HEALTHY.
    quarantine: QUARANTINE.
    checkup: CHECKUP.
    transient: TRANSIENT.
    infected: INFECTED.
    		 option -
    start-mac First MAC address in the range. mac-address Not Specified
    end-mac Last MAC address in the range. mac-address Not Specified
    start-ip First IP address (inclusive) in the range for the address. ipv4-address-any Not Specified
    end-ip Final IP address (inclusive) in the range for the address. ipv4-address-any Not Specified
    fqdn Fully Qualified Domain Name address. string Maximum length: 255
    country IP addresses associated to a specific country. string Maximum length: 2
    wildcard-fqdn Fully Qualified Domain Name with wildcard characters. string Maximum length: 255
    cache-ttl Defines the minimal TTL of individual IP addresses in FQDN cache measured in seconds. integer Minimum value: 0 Maximum value: 86400
    wildcard IP address and wildcard netmask. ipv4-classnet-any Not Specified
    sdn SDN. string Maximum length: 35
    fsso-group <name> FSSO group(s).
    FSSO group name.    		 string Maximum length: 511
    interface Name of interface whose IP address is to be used. string Maximum length: 35
    tenant Tenant. string Maximum length: 35
    organization Organization domain name (Syntax: organization/domain). string Maximum length: 35
    epg-name Endpoint group name. string Maximum length: 255
    subnet-name Subnet name. string Maximum length: 255
    sdn-tag SDN Tag. string Maximum length: 15
    policy-group Policy group name. string Maximum length: 15
    comment Comment. var-string Maximum length: 255
    associated-interface Network interface associated with address. string Maximum length: 35
    color Color of icon on the GUI. integer Minimum value: 0 Maximum value: 32
    filter Match criteria filter. var-string Maximum length: 2047
    sdn-addr-type Type of addresses to collect.
    private: Collect private addresses only.
    public: Collect public addresses only.
    all: Collect both public and private addresses.
    		 option -
    obj-id Object ID for NSX. var-string Maximum length: 255
    allow-routing Enable/disable use of this address in the static route configuration.
    enable: Enable use of this address in the static route configuration.
    disable: Disable use of this address in the static route configuration.
    		 option -

    config tagging

    Parameter Name Description Type Size
    category Tag category. string Maximum length: 63
    tags <name> Tags.
    Tag name.    		 string Maximum length: 79
    Previous
    Next

    firewall address

    Configure IPv4 addresses.

      config firewall address
      Description: Configure IPv4 addresses.
      edit <name>
          set uuid {uuid}
          set subnet {ipv4-classnet-any}
          set type [ipmask|iprange|...]
          set sub-type [sdn|clearpass-spt|...]
          set clearpass-spt [unknown|healthy|...]
          set start-mac {mac-address}
          set end-mac {mac-address}
          set start-ip {ipv4-address-any}
          set end-ip {ipv4-address-any}
          set fqdn {string}
          set country {string}
          set wildcard-fqdn {string}
          set cache-ttl {integer}
          set wildcard {ipv4-classnet-any}
          set sdn {string}
          set fsso-group <name1>, <name2>, ...
          set interface {string}
          set tenant {string}
          set organization {string}
          set epg-name {string}
          set subnet-name {string}
          set sdn-tag {string}
          set policy-group {string}
          set comment {var-string}
          set associated-interface {string}
          set color {integer}
          set filter {var-string}
          set sdn-addr-type [private|public|...]
          set obj-id {var-string}
          config list
              Description: IP address list.
              edit <ip>

              next
          end
          config tagging
              Description: Config object tagging.
              edit <name>
                  set category {string}
                  set tags <name1>, <name2>, ...
              next
          end
          set allow-routing [enable|disable]
      next
  end

    config firewall address

    Parameter Name Description Type Size
    uuid Universally Unique Identifier (UUID; automatically assigned but can be manually reset). uuid Not Specified
    subnet IP address and subnet mask of address. ipv4-classnet-any Not Specified
    type Type of address.
    ipmask: Standard IPv4 address with subnet mask.
    iprange: Range of IPv4 addresses between two specified addresses (inclusive).
    fqdn: Fully Qualified Domain Name address.
    geography: IP addresses from a specified country.
    wildcard: Standard IPv4 using a wildcard subnet mask.
    dynamic: Dynamic address object.
    interface-subnet: IP and subnet of interface.
    mac: Range of MAC addresses.
    		 option -
    sub-type Sub-type of address.
    sdn: SDN address.
    clearpass-spt: ClearPass SPT (System Posture Token) address.
    fsso: FSSO address.
    ems-tag: FortiClient EMS tag.
    		 option -
    clearpass-spt SPT (System Posture Token) value.
    unknown: UNKNOWN.
    healthy: HEALTHY.
    quarantine: QUARANTINE.
    checkup: CHECKUP.
    transient: TRANSIENT.
    infected: INFECTED.
    		 option -
    start-mac First MAC address in the range. mac-address Not Specified
    end-mac Last MAC address in the range. mac-address Not Specified
    start-ip First IP address (inclusive) in the range for the address. ipv4-address-any Not Specified
    end-ip Final IP address (inclusive) in the range for the address. ipv4-address-any Not Specified
    fqdn Fully Qualified Domain Name address. string Maximum length: 255
    country IP addresses associated to a specific country. string Maximum length: 2
    wildcard-fqdn Fully Qualified Domain Name with wildcard characters. string Maximum length: 255
    cache-ttl Defines the minimal TTL of individual IP addresses in FQDN cache measured in seconds. integer Minimum value: 0 Maximum value: 86400
    wildcard IP address and wildcard netmask. ipv4-classnet-any Not Specified
    sdn SDN. string Maximum length: 35
    fsso-group <name> FSSO group(s).
    FSSO group name.    		 string Maximum length: 511
    interface Name of interface whose IP address is to be used. string Maximum length: 35
    tenant Tenant. string Maximum length: 35
    organization Organization domain name (Syntax: organization/domain). string Maximum length: 35
    epg-name Endpoint group name. string Maximum length: 255
    subnet-name Subnet name. string Maximum length: 255
    sdn-tag SDN Tag. string Maximum length: 15
    policy-group Policy group name. string Maximum length: 15
    comment Comment. var-string Maximum length: 255
    associated-interface Network interface associated with address. string Maximum length: 35
    color Color of icon on the GUI. integer Minimum value: 0 Maximum value: 32
    filter Match criteria filter. var-string Maximum length: 2047
    sdn-addr-type Type of addresses to collect.
    private: Collect private addresses only.
    public: Collect public addresses only.
    all: Collect both public and private addresses.
    		 option -
    obj-id Object ID for NSX. var-string Maximum length: 255
    allow-routing Enable/disable use of this address in the static route configuration.
    enable: Enable use of this address in the static route configuration.
    disable: Disable use of this address in the static route configuration.
    		 option -

    config tagging

    Parameter Name Description Type Size
    category Tag category. string Maximum length: 63
    tags <name> Tags.
    Tag name.    		 string Maximum length: 79
    Previous
    Next