Fortinet white logo
Fortinet white logo

CLI Reference

config firewall shaping-policy

config firewall shaping-policy

Configure shaping policies.

config firewall shaping-policy
    Description: Configure shaping policies.
    edit <id>
        set comment {var-string}
        set status [enable|disable]
        set ip-version [4|6]
        set service-type [service|internet-service]
        config srcaddr
            Description: Source address.
            edit <name>
            next
        end
        config dstaddr
            Description: Destination address.
            edit <name>
            next
        end
        config srcaddr6
            Description: IPv6 source address.
            edit <name>
            next
        end
        config dstaddr6
            Description: IPv6 destination address.
            edit <name>
            next
        end
        config service
            Description: Service name.
            edit <name>
            next
        end
        config internet-service
            Description: Internet Service ID.
            edit <id>
            next
        end
        config internet-service-custom
            Description: Internet-service-custom list and groups.
            edit <name>
            next
        end
        config users
            Description: User name.
            edit <name>
            next
        end
        config groups
            Description: User authentication groups.
            edit <name>
            next
        end
        config dstintf
            Description: Destination interface list.
            edit <name>
            next
        end
        set class-id {integer}
        set class-id-reverse {integer}
        set diffserv-forward [enable|disable]
        set diffservcode-forward {user}
        set diffserv-reverse [enable|disable]
        set diffservcode-rev {user}
    next
end

config firewall shaping-policy

Parameter

Description

Type

Size

comment

Comments.

var-string

Maximum length: 255

status

Enable/disable traffic shaping policy.

option

-

Option

Description

enable

Enable traffic shaping policy.

disable

Disable traffic shaping policy.

ip-version

IP version.

option

-

Option

Description

4

Use IPv4 addressing for Configuration Method.

6

Use IPv6 addressing for Configuration Method.

service-type

Select service-type: service / internet-service.

option

-

Option

Description

service

Firewall services.

internet-service

Internet-services.

class-id

Forward class id.

integer

Minimum value: 1 Maximum value: 31

class-id-reverse

Reverse class id.

integer

Minimum value: 1 Maximum value: 31

diffserv-forward

Enable/disable forward (original) traffic DiffServ.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

diffservcode-forward

Forward (original) traffic DiffServ code point value.

user

Not Specified

diffserv-reverse

Enable/disable reverse (reply) traffic DiffServ.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

diffservcode-rev

Reverse (reply) traffic DiffServ code point value.

user

Not Specified

config firewall shaping-policy

config firewall shaping-policy

Configure shaping policies.

config firewall shaping-policy
    Description: Configure shaping policies.
    edit <id>
        set comment {var-string}
        set status [enable|disable]
        set ip-version [4|6]
        set service-type [service|internet-service]
        config srcaddr
            Description: Source address.
            edit <name>
            next
        end
        config dstaddr
            Description: Destination address.
            edit <name>
            next
        end
        config srcaddr6
            Description: IPv6 source address.
            edit <name>
            next
        end
        config dstaddr6
            Description: IPv6 destination address.
            edit <name>
            next
        end
        config service
            Description: Service name.
            edit <name>
            next
        end
        config internet-service
            Description: Internet Service ID.
            edit <id>
            next
        end
        config internet-service-custom
            Description: Internet-service-custom list and groups.
            edit <name>
            next
        end
        config users
            Description: User name.
            edit <name>
            next
        end
        config groups
            Description: User authentication groups.
            edit <name>
            next
        end
        config dstintf
            Description: Destination interface list.
            edit <name>
            next
        end
        set class-id {integer}
        set class-id-reverse {integer}
        set diffserv-forward [enable|disable]
        set diffservcode-forward {user}
        set diffserv-reverse [enable|disable]
        set diffservcode-rev {user}
    next
end

config firewall shaping-policy

Parameter

Description

Type

Size

comment

Comments.

var-string

Maximum length: 255

status

Enable/disable traffic shaping policy.

option

-

Option

Description

enable

Enable traffic shaping policy.

disable

Disable traffic shaping policy.

ip-version

IP version.

option

-

Option

Description

4

Use IPv4 addressing for Configuration Method.

6

Use IPv6 addressing for Configuration Method.

service-type

Select service-type: service / internet-service.

option

-

Option

Description

service

Firewall services.

internet-service

Internet-services.

class-id

Forward class id.

integer

Minimum value: 1 Maximum value: 31

class-id-reverse

Reverse class id.

integer

Minimum value: 1 Maximum value: 31

diffserv-forward

Enable/disable forward (original) traffic DiffServ.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

diffservcode-forward

Forward (original) traffic DiffServ code point value.

user

Not Specified

diffserv-reverse

Enable/disable reverse (reply) traffic DiffServ.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

diffservcode-rev

Reverse (reply) traffic DiffServ code point value.

user

Not Specified