Fortinet white logo
Fortinet white logo

CLI Reference

config firewall address6

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6

Description: Configure IPv6 firewall addresses.

edit <name>

set uuid {uuid}

set type [ipprefix|iprange|...]

set macaddr <macaddr1>, <macaddr2>, ...

set sdn {string}

set ip6 {ipv6-network}

set start-ip {ipv6-address}

set end-ip {ipv6-address}

set fqdn {string}

set country {string}

set cache-ttl {integer}

set color {integer}

set obj-id {var-string}

config list

Description: IP address list.

edit <ip>

next

end

config tagging

Description: Config object tagging.

edit <name>

set category {string}

set tags <name1>, <name2>, ...

next

end

set comment {var-string}

set template {string}

config subnet-segment

Description: IPv6 subnet segments.

edit <name>

set type [any|specific]

set value {string}

next

end

set host-type [any|specific]

set host {ipv6-address}

set tenant {string}

set epg-name {string}

set sdn-tag {string}

set fabric-object [enable|disable]

next

end

config firewall address6

Parameter

Description

Type

Size

Default

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

type

Type of IPv6 address object .

option

-

ipprefix

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

mac

Range of MAC addresses.

macaddr <macaddr>

Multiple MAC address ranges.

MAC address ranges <start>[-<end>] separated by space.

string

Maximum length: 127

sdn

SDN.

string

Not Specified

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

fqdn

Fully qualified domain name.

string

Not Specified

country

IPv6 addresses associated to a specific country.

string

Not Specified

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI .

integer

Minimum value: 0 Maximum value: 32

0

obj-id

Object ID for NSX.

var-string

Not Specified

comment

Comment.

var-string

Not Specified

template

IPv6 address template.

string

Not Specified

host-type

Host type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific host address.

host

Host Address.

ipv6-address

Not Specified

::

tenant

Tenant.

string

Not Specified

epg-name

Endpoint group name.

string

Not Specified

sdn-tag

SDN Tag.

string

Not Specified

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

config tagging

Parameter

Description

Type

Size

Default

category

Tag category.

string

Not Specified

tags <name>

Tags.

Tag name.

string

Maximum length: 79

config subnet-segment

Parameter

Description

Type

Size

Default

type

Subnet segment type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Not Specified

config firewall address6

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6

Description: Configure IPv6 firewall addresses.

edit <name>

set uuid {uuid}

set type [ipprefix|iprange|...]

set macaddr <macaddr1>, <macaddr2>, ...

set sdn {string}

set ip6 {ipv6-network}

set start-ip {ipv6-address}

set end-ip {ipv6-address}

set fqdn {string}

set country {string}

set cache-ttl {integer}

set color {integer}

set obj-id {var-string}

config list

Description: IP address list.

edit <ip>

next

end

config tagging

Description: Config object tagging.

edit <name>

set category {string}

set tags <name1>, <name2>, ...

next

end

set comment {var-string}

set template {string}

config subnet-segment

Description: IPv6 subnet segments.

edit <name>

set type [any|specific]

set value {string}

next

end

set host-type [any|specific]

set host {ipv6-address}

set tenant {string}

set epg-name {string}

set sdn-tag {string}

set fabric-object [enable|disable]

next

end

config firewall address6

Parameter

Description

Type

Size

Default

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

type

Type of IPv6 address object .

option

-

ipprefix

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

mac

Range of MAC addresses.

macaddr <macaddr>

Multiple MAC address ranges.

MAC address ranges <start>[-<end>] separated by space.

string

Maximum length: 127

sdn

SDN.

string

Not Specified

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

fqdn

Fully qualified domain name.

string

Not Specified

country

IPv6 addresses associated to a specific country.

string

Not Specified

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI .

integer

Minimum value: 0 Maximum value: 32

0

obj-id

Object ID for NSX.

var-string

Not Specified

comment

Comment.

var-string

Not Specified

template

IPv6 address template.

string

Not Specified

host-type

Host type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific host address.

host

Host Address.

ipv6-address

Not Specified

::

tenant

Tenant.

string

Not Specified

epg-name

Endpoint group name.

string

Not Specified

sdn-tag

SDN Tag.

string

Not Specified

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

config tagging

Parameter

Description

Type

Size

Default

category

Tag category.

string

Not Specified

tags <name>

Tags.

Tag name.

string

Maximum length: 79

config subnet-segment

Parameter

Description

Type

Size

Default

type

Subnet segment type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Not Specified