Fortinet white logo
Fortinet white logo

CLI Reference

config firewall multicast-policy6

config firewall multicast-policy6

Configure IPv6 multicast NAT policies.

config firewall multicast-policy6
    Description: Configure IPv6 multicast NAT policies.
    edit <id>
        set action [accept|deny]
        set auto-asic-offload [enable|disable]
        set comments {var-string}
        set dstaddr <name1>, <name2>, ...
        set dstintf {string}
        set end-port {integer}
        set ips-sensor {string}
        set logtraffic [all|utm|...]
        set name {string}
        set protocol {integer}
        set srcaddr <name1>, <name2>, ...
        set srcintf {string}
        set start-port {integer}
        set status [enable|disable]
        set utm-status [enable|disable]
        set uuid {uuid}
    next
end

config firewall multicast-policy6

Parameter

Description

Type

Size

Default

action

Accept or deny traffic matching the policy.

option

-

accept

Option

Description

accept

Accept.

deny

Deny.

auto-asic-offload *

Enable/disable offloading policy traffic for hardware acceleration.

option

-

enable

Option

Description

enable

Enable offloading policy traffic for hardware acceleration.

disable

Disable offloading policy traffic for hardware acceleration.

comments

Comment.

var-string

Maximum length: 1023

dstaddr <name>

IPv6 destination address name.

Address name.

string

Maximum length: 79

dstintf

IPv6 destination interface name.

string

Maximum length: 35

end-port

Integer value for ending TCP/UDP/SCTP destination port in range.

integer

Minimum value: 0 Maximum value: 65535

65535

id

Policy ID.

integer

Minimum value: 0 Maximum value: 4294967294

0

ips-sensor

Name of an existing IPS sensor.

string

Maximum length: 35

logtraffic

Enable or disable logging. Log all sessions or security profile sessions.

option

-

utm

Option

Description

all

Enable logging traffic accepted by this policy.

utm

Log traffic that has a security profile applied to it.

disable

Disable all logging for this policy.

name

Policy name.

string

Maximum length: 35

protocol

Integer value for the protocol type as defined by IANA.

integer

Minimum value: 0 Maximum value: 255

0

srcaddr <name>

IPv6 source address name.

Address name.

string

Maximum length: 79

srcintf

IPv6 source interface name.

string

Maximum length: 35

start-port

Integer value for starting TCP/UDP/SCTP destination port in range.

integer

Minimum value: 0 Maximum value: 65535

1

status

Enable/disable this policy.

option

-

enable

Option

Description

enable

Enable this policy.

disable

Disable this policy.

utm-status

Enable to add an IPS security profile to the policy.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

config firewall multicast-policy6

config firewall multicast-policy6

Configure IPv6 multicast NAT policies.

config firewall multicast-policy6
    Description: Configure IPv6 multicast NAT policies.
    edit <id>
        set action [accept|deny]
        set auto-asic-offload [enable|disable]
        set comments {var-string}
        set dstaddr <name1>, <name2>, ...
        set dstintf {string}
        set end-port {integer}
        set ips-sensor {string}
        set logtraffic [all|utm|...]
        set name {string}
        set protocol {integer}
        set srcaddr <name1>, <name2>, ...
        set srcintf {string}
        set start-port {integer}
        set status [enable|disable]
        set utm-status [enable|disable]
        set uuid {uuid}
    next
end

config firewall multicast-policy6

Parameter

Description

Type

Size

Default

action

Accept or deny traffic matching the policy.

option

-

accept

Option

Description

accept

Accept.

deny

Deny.

auto-asic-offload *

Enable/disable offloading policy traffic for hardware acceleration.

option

-

enable

Option

Description

enable

Enable offloading policy traffic for hardware acceleration.

disable

Disable offloading policy traffic for hardware acceleration.

comments

Comment.

var-string

Maximum length: 1023

dstaddr <name>

IPv6 destination address name.

Address name.

string

Maximum length: 79

dstintf

IPv6 destination interface name.

string

Maximum length: 35

end-port

Integer value for ending TCP/UDP/SCTP destination port in range.

integer

Minimum value: 0 Maximum value: 65535

65535

id

Policy ID.

integer

Minimum value: 0 Maximum value: 4294967294

0

ips-sensor

Name of an existing IPS sensor.

string

Maximum length: 35

logtraffic

Enable or disable logging. Log all sessions or security profile sessions.

option

-

utm

Option

Description

all

Enable logging traffic accepted by this policy.

utm

Log traffic that has a security profile applied to it.

disable

Disable all logging for this policy.

name

Policy name.

string

Maximum length: 35

protocol

Integer value for the protocol type as defined by IANA.

integer

Minimum value: 0 Maximum value: 255

0

srcaddr <name>

IPv6 source address name.

Address name.

string

Maximum length: 79

srcintf

IPv6 source interface name.

string

Maximum length: 35

start-port

Integer value for starting TCP/UDP/SCTP destination port in range.

integer

Minimum value: 0 Maximum value: 65535

1

status

Enable/disable this policy.

option

-

enable

Option

Description

enable

Enable this policy.

disable

Disable this policy.

utm-status

Enable to add an IPS security profile to the policy.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.