Fortinet white logo
Fortinet white logo

CLI Reference

config firewall internet-service-extension

config firewall internet-service-extension

Configure Internet Services Extension.

config firewall internet-service-extension
    Description: Configure Internet Services Extension.
    edit <id>
        set comment {var-string}
        config disable-entry
            Description: Disable entries in the Internet Service database.
            edit <id>
                set addr-mode [ipv4|ipv6]
                set protocol {integer}
                config port-range
                    Description: Port ranges in the disable entry.
                    edit <id>
                        set start-port {integer}
                        set end-port {integer}
                    next
                end
                config ip-range
                    Description: IPv4 ranges in the disable entry.
                    edit <id>
                        set start-ip {ipv4-address-any}
                        set end-ip {ipv4-address-any}
                    next
                end
                config ip6-range
                    Description: IPv6 ranges in the disable entry.
                    edit <id>
                        set start-ip6 {ipv6-address}
                        set end-ip6 {ipv6-address}
                    next
                end
            next
        end
        config entry
            Description: Entries added to the Internet Service extension database.
            edit <id>
                set addr-mode [ipv4|ipv6]
                set protocol {integer}
                config port-range
                    Description: Port ranges in the custom entry.
                    edit <id>
                        set start-port {integer}
                        set end-port {integer}
                    next
                end
                set dst <name1>, <name2>, ...
                set dst6 <name1>, <name2>, ...
            next
        end
    next
end

config firewall internet-service-extension

Parameter

Description

Type

Size

Default

comment

Comment.

var-string

Maximum length: 255

id

Internet Service ID in the Internet Service database.

integer

Minimum value: 0 Maximum value: 4294967295

0

config disable-entry

Parameter

Description

Type

Size

Default

id

Disable entry ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

addr-mode

Address mode (IPv4 or IPv6).

option

-

ipv4

Option

Description

ipv4

IPv4 mode.

ipv6

IPv6 mode.

protocol

Integer value for the protocol type as defined by IANA.

integer

Minimum value: 0 Maximum value: 255

0

config port-range

Parameter

Description

Type

Size

Default

id

Custom entry port range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-port

Integer value for starting TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

1

end-port

Integer value for ending TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

65535

config ip-range

Parameter

Description

Type

Size

Default

id

Disable entry range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-ip

Start IPv4 address.

ipv4-address-any

Not Specified

0.0.0.0

end-ip

End IPv4 address.

ipv4-address-any

Not Specified

0.0.0.0

config ip6-range

Parameter

Description

Type

Size

Default

id

Disable entry range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-ip6

Start IPv6 address.

ipv6-address

Not Specified

::

end-ip6

End IPv6 address.

ipv6-address

Not Specified

::

config entry

Parameter

Description

Type

Size

Default

id

Entry ID.

integer

Minimum value: 0 Maximum value: 255

0

addr-mode

Address mode (IPv4 or IPv6).

option

-

ipv4

Option

Description

ipv4

IPv4 mode.

ipv6

IPv6 mode.

protocol

Integer value for the protocol type as defined by IANA.

integer

Minimum value: 0 Maximum value: 255

0

dst <name>

Destination address or address group name.

Select the destination address or address group object from available options.

string

Maximum length: 79

dst6 <name>

Destination address6 or address6 group name.

Select the destination address6 or address group object from available options.

string

Maximum length: 79

config port-range

Parameter

Description

Type

Size

Default

id

Custom entry port range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-port

Integer value for starting TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

1

end-port

Integer value for ending TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

65535

config firewall internet-service-extension

config firewall internet-service-extension

Configure Internet Services Extension.

config firewall internet-service-extension
    Description: Configure Internet Services Extension.
    edit <id>
        set comment {var-string}
        config disable-entry
            Description: Disable entries in the Internet Service database.
            edit <id>
                set addr-mode [ipv4|ipv6]
                set protocol {integer}
                config port-range
                    Description: Port ranges in the disable entry.
                    edit <id>
                        set start-port {integer}
                        set end-port {integer}
                    next
                end
                config ip-range
                    Description: IPv4 ranges in the disable entry.
                    edit <id>
                        set start-ip {ipv4-address-any}
                        set end-ip {ipv4-address-any}
                    next
                end
                config ip6-range
                    Description: IPv6 ranges in the disable entry.
                    edit <id>
                        set start-ip6 {ipv6-address}
                        set end-ip6 {ipv6-address}
                    next
                end
            next
        end
        config entry
            Description: Entries added to the Internet Service extension database.
            edit <id>
                set addr-mode [ipv4|ipv6]
                set protocol {integer}
                config port-range
                    Description: Port ranges in the custom entry.
                    edit <id>
                        set start-port {integer}
                        set end-port {integer}
                    next
                end
                set dst <name1>, <name2>, ...
                set dst6 <name1>, <name2>, ...
            next
        end
    next
end

config firewall internet-service-extension

Parameter

Description

Type

Size

Default

comment

Comment.

var-string

Maximum length: 255

id

Internet Service ID in the Internet Service database.

integer

Minimum value: 0 Maximum value: 4294967295

0

config disable-entry

Parameter

Description

Type

Size

Default

id

Disable entry ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

addr-mode

Address mode (IPv4 or IPv6).

option

-

ipv4

Option

Description

ipv4

IPv4 mode.

ipv6

IPv6 mode.

protocol

Integer value for the protocol type as defined by IANA.

integer

Minimum value: 0 Maximum value: 255

0

config port-range

Parameter

Description

Type

Size

Default

id

Custom entry port range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-port

Integer value for starting TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

1

end-port

Integer value for ending TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

65535

config ip-range

Parameter

Description

Type

Size

Default

id

Disable entry range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-ip

Start IPv4 address.

ipv4-address-any

Not Specified

0.0.0.0

end-ip

End IPv4 address.

ipv4-address-any

Not Specified

0.0.0.0

config ip6-range

Parameter

Description

Type

Size

Default

id

Disable entry range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-ip6

Start IPv6 address.

ipv6-address

Not Specified

::

end-ip6

End IPv6 address.

ipv6-address

Not Specified

::

config entry

Parameter

Description

Type

Size

Default

id

Entry ID.

integer

Minimum value: 0 Maximum value: 255

0

addr-mode

Address mode (IPv4 or IPv6).

option

-

ipv4

Option

Description

ipv4

IPv4 mode.

ipv6

IPv6 mode.

protocol

Integer value for the protocol type as defined by IANA.

integer

Minimum value: 0 Maximum value: 255

0

dst <name>

Destination address or address group name.

Select the destination address or address group object from available options.

string

Maximum length: 79

dst6 <name>

Destination address6 or address6 group name.

Select the destination address6 or address group object from available options.

string

Maximum length: 79

config port-range

Parameter

Description

Type

Size

Default

id

Custom entry port range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-port

Integer value for starting TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

1

end-port

Integer value for ending TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

65535