Fortinet black logo

CLI Reference

config firewall shaping-policy

config firewall shaping-policy

Configure shaping policies.

config firewall shaping-policy
    Description: Configure shaping policies.
    edit <id>
        set comment {var-string}
        set status [enable|disable]
        set ip-version [4|6]
        set service-type [service|internet-service]
        set srcaddr <name1>, <name2>, ...
        set dstaddr <name1>, <name2>, ...
        set srcaddr6 <name1>, <name2>, ...
        set dstaddr6 <name1>, <name2>, ...
        set service <name1>, <name2>, ...
        set internet-service-name <name1>, <name2>, ...
        set internet-service-group <name1>, <name2>, ...
        set internet-service-custom <name1>, <name2>, ...
        set internet-service-custom-group <name1>, <name2>, ...
        set users <name1>, <name2>, ...
        set groups <name1>, <name2>, ...
        set dstintf <name1>, <name2>, ...
        set class-id {integer}
        set class-id-reverse {integer}
        set diffserv-forward [enable|disable]
        set diffservcode-forward {user}
        set diffserv-reverse [enable|disable]
        set diffservcode-rev {user}
    next
end

config firewall shaping-policy

Parameter

Description

Type

Size

Default

comment

Comments.

var-string

Maximum length: 255

status

Enable/disable traffic shaping policy.

option

-

enable

Option

Description

enable

Enable traffic shaping policy.

disable

Disable traffic shaping policy.

ip-version

IP version.

option

-

4

Option

Description

4

Use IPv4 addressing for Configuration Method.

6

Use IPv6 addressing for Configuration Method.

service-type

Select service-type: service / internet-service.

option

-

service

Option

Description

service

Firewall services.

internet-service

Internet-services.

srcaddr <name>

Source address.

Address name.

string

Maximum length: 79

dstaddr <name>

Destination address.

Address name.

string

Maximum length: 79

srcaddr6 <name>

IPv6 source address.

Address name.

string

Maximum length: 79

dstaddr6 <name>

IPv6 destination address.

Address name.

string

Maximum length: 79

service <name>

Service name.

Service name.

string

Maximum length: 79

internet-service-name <name>

Internet Service ID.

Internet Service name.

string

Maximum length: 79

internet-service-group <name>

Internet Service group name.

Internet Service group name.

string

Maximum length: 79

internet-service-custom <name>

Custom Internet Service name.

Custom Internet Service name.

string

Maximum length: 79

internet-service-custom-group <name>

Custom Internet Service group name.

Custom Internet Service group name.

string

Maximum length: 79

users <name>

User name.

User name.

string

Maximum length: 79

groups <name>

User authentication groups.

Group name.

string

Maximum length: 79

dstintf <name>

Destination interface list.

Interface name.

string

Maximum length: 79

class-id

Forward class id.

integer

Minimum value: 2 Maximum value: 31

0

class-id-reverse

Reverse class id.

integer

Minimum value: 2 Maximum value: 31

0

diffserv-forward

Enable/disable forward (original) traffic DiffServ.

option

-

enable disable

Option

Description

enable

Enable setting.

disable

Disable setting.

diffservcode-forward

Forward (original) traffic DiffServ code point value.

user

Not Specified

diffserv-reverse

Enable/disable reverse (reply) traffic DiffServ.

option

-

enable disable

Option

Description

enable

Enable setting.

disable

Disable setting.

diffservcode-rev

Reverse (reply) traffic DiffServ code point value.

user

Not Specified

config firewall shaping-policy

Configure shaping policies.

config firewall shaping-policy
    Description: Configure shaping policies.
    edit <id>
        set comment {var-string}
        set status [enable|disable]
        set ip-version [4|6]
        set service-type [service|internet-service]
        set srcaddr <name1>, <name2>, ...
        set dstaddr <name1>, <name2>, ...
        set srcaddr6 <name1>, <name2>, ...
        set dstaddr6 <name1>, <name2>, ...
        set service <name1>, <name2>, ...
        set internet-service-name <name1>, <name2>, ...
        set internet-service-group <name1>, <name2>, ...
        set internet-service-custom <name1>, <name2>, ...
        set internet-service-custom-group <name1>, <name2>, ...
        set users <name1>, <name2>, ...
        set groups <name1>, <name2>, ...
        set dstintf <name1>, <name2>, ...
        set class-id {integer}
        set class-id-reverse {integer}
        set diffserv-forward [enable|disable]
        set diffservcode-forward {user}
        set diffserv-reverse [enable|disable]
        set diffservcode-rev {user}
    next
end

config firewall shaping-policy

Parameter

Description

Type

Size

Default

comment

Comments.

var-string

Maximum length: 255

status

Enable/disable traffic shaping policy.

option

-

enable

Option

Description

enable

Enable traffic shaping policy.

disable

Disable traffic shaping policy.

ip-version

IP version.

option

-

4

Option

Description

4

Use IPv4 addressing for Configuration Method.

6

Use IPv6 addressing for Configuration Method.

service-type

Select service-type: service / internet-service.

option

-

service

Option

Description

service

Firewall services.

internet-service

Internet-services.

srcaddr <name>

Source address.

Address name.

string

Maximum length: 79

dstaddr <name>

Destination address.

Address name.

string

Maximum length: 79

srcaddr6 <name>

IPv6 source address.

Address name.

string

Maximum length: 79

dstaddr6 <name>

IPv6 destination address.

Address name.

string

Maximum length: 79

service <name>

Service name.

Service name.

string

Maximum length: 79

internet-service-name <name>

Internet Service ID.

Internet Service name.

string

Maximum length: 79

internet-service-group <name>

Internet Service group name.

Internet Service group name.

string

Maximum length: 79

internet-service-custom <name>

Custom Internet Service name.

Custom Internet Service name.

string

Maximum length: 79

internet-service-custom-group <name>

Custom Internet Service group name.

Custom Internet Service group name.

string

Maximum length: 79

users <name>

User name.

User name.

string

Maximum length: 79

groups <name>

User authentication groups.

Group name.

string

Maximum length: 79

dstintf <name>

Destination interface list.

Interface name.

string

Maximum length: 79

class-id

Forward class id.

integer

Minimum value: 2 Maximum value: 31

0

class-id-reverse

Reverse class id.

integer

Minimum value: 2 Maximum value: 31

0

diffserv-forward

Enable/disable forward (original) traffic DiffServ.

option

-

enable disable

Option

Description

enable

Enable setting.

disable

Disable setting.

diffservcode-forward

Forward (original) traffic DiffServ code point value.

user

Not Specified

diffserv-reverse

Enable/disable reverse (reply) traffic DiffServ.

option

-

enable disable

Option

Description

enable

Enable setting.

disable

Disable setting.

diffservcode-rev

Reverse (reply) traffic DiffServ code point value.

user

Not Specified