Fortinet Document Library

Version:

Version:

Version:

Version:

Version:


Table of Contents

Handbook

Configuring an address group

An address group is a configuration object that specifies the source and destination IP addresses that are the matching criteria for DNS policies.

Before you begin:

  • You must have Read-Write permission for Global Load Balance settings.

After you have configured an address group, you can select it in the DNS policy configuration.

To configure address groups:
  1. Go to Global Load Balance > Zone Tools.
  2. Click the Address Group tab.
  3. Click Create New to display the configuration editor.
  4. Complete the configuration and add members as described in Address group configuration

Address group configuration

Settings Guidelines

Name

Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces. You reference this name in the global DNS policy configuration.

Note: After you initially save the configuration, you cannot edit the name.

Member

Address Type

  • IPv4
  • IPv6

IP/Netmask

Address/mask notation to match the IP address in the packet header.

Create objects to match source IP address and different objects to match destination IP address.

Action

  • Include—The rule logic creates an address object that includes addresses matching the specified address block.
  • Exclude—The rule logic creates an address object that excludes addresses matching the specified address block.

Configuring an address group

An address group is a configuration object that specifies the source and destination IP addresses that are the matching criteria for DNS policies.

Before you begin:

  • You must have Read-Write permission for Global Load Balance settings.

After you have configured an address group, you can select it in the DNS policy configuration.

To configure address groups:
  1. Go to Global Load Balance > Zone Tools.
  2. Click the Address Group tab.
  3. Click Create New to display the configuration editor.
  4. Complete the configuration and add members as described in Address group configuration

Address group configuration

Settings Guidelines

Name

Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces. You reference this name in the global DNS policy configuration.

Note: After you initially save the configuration, you cannot edit the name.

Member

Address Type

  • IPv4
  • IPv6

IP/Netmask

Address/mask notation to match the IP address in the packet header.

Create objects to match source IP address and different objects to match destination IP address.

Action

  • Include—The rule logic creates an address object that includes addresses matching the specified address block.
  • Exclude—The rule logic creates an address object that excludes addresses matching the specified address block.