Fortinet Document Library

Version:


Table of Contents

CLI Reference

6.0.0
Download PDF
Copy Link

firewall internet-service-custom

Use this command to create and configure custom Internet Service objects.

config firewall internet-service-custom
    edit {name}
    # Configure custom Internet Services.
        set name {string}   Internet Service name. size[63]
        set master-service-id {integer}   Internet Service ID in the Internet Service database. range[0-4294967295] - datasource(s): firewall.internet-service.id
        set comment {string}   Comment. size[255]
        config entry
            edit {id}
            # Entries added to the Internet Service database and custom database.
                set id {integer}   Entry ID(1-255). range[0-255]
                set protocol {integer}   Integer value for the protocol type as defined by IANA (0 - 255). range[0-255]
                config port-range
                    edit {id}
                    # Port ranges in the custom entry.
                        set id {integer}   Custom entry port range ID. range[0-4294967295]
                        set start-port {integer}   Integer value for starting TCP/UDP/SCTP destination port in range (1 to 65535). range[1-65535]
                        set end-port {integer}   Integer value for ending TCP/UDP/SCTP destination port in range (1 to 65535). range[1-65535]
                    next
                config dst
                    edit {name}
                    # Destination address or address group name.
                        set name {string}   Select the destination address or address group object from available options. size[64] - datasource(s): firewall.address.name,firewall.addrgrp.name
                    next
            next
        config disable-entry
            edit {id}
            # Disable entries in the Internet Service database.
                set id {integer}   Disable entry ID. range[0-4294967295]
                set protocol {integer}   Integer value for the protocol type as defined by IANA (0 - 255). range[0-255]
                set port {integer}   Integer value for the TCP/IP port (0 - 65535). range[0-65535]
                config ip-range
                    edit {id}
                    # IP ranges in the disable entry.
                        set id {integer}   Disable entry range ID. range[0-4294967295]
                        set start-ip {ipv4 address any}   Start IP address.
                        set end-ip {ipv4 address any}   End IP address.
                    next
            next
    next
end

firewall internet-service-custom

Use this command to create and configure custom Internet Service objects.

config firewall internet-service-custom
    edit {name}
    # Configure custom Internet Services.
        set name {string}   Internet Service name. size[63]
        set master-service-id {integer}   Internet Service ID in the Internet Service database. range[0-4294967295] - datasource(s): firewall.internet-service.id
        set comment {string}   Comment. size[255]
        config entry
            edit {id}
            # Entries added to the Internet Service database and custom database.
                set id {integer}   Entry ID(1-255). range[0-255]
                set protocol {integer}   Integer value for the protocol type as defined by IANA (0 - 255). range[0-255]
                config port-range
                    edit {id}
                    # Port ranges in the custom entry.
                        set id {integer}   Custom entry port range ID. range[0-4294967295]
                        set start-port {integer}   Integer value for starting TCP/UDP/SCTP destination port in range (1 to 65535). range[1-65535]
                        set end-port {integer}   Integer value for ending TCP/UDP/SCTP destination port in range (1 to 65535). range[1-65535]
                    next
                config dst
                    edit {name}
                    # Destination address or address group name.
                        set name {string}   Select the destination address or address group object from available options. size[64] - datasource(s): firewall.address.name,firewall.addrgrp.name
                    next
            next
        config disable-entry
            edit {id}
            # Disable entries in the Internet Service database.
                set id {integer}   Disable entry ID. range[0-4294967295]
                set protocol {integer}   Integer value for the protocol type as defined by IANA (0 - 255). range[0-255]
                set port {integer}   Integer value for the TCP/IP port (0 - 65535). range[0-65535]
                config ip-range
                    edit {id}
                    # IP ranges in the disable entry.
                        set id {integer}   Disable entry range ID. range[0-4294967295]
                        set start-ip {ipv4 address any}   Start IP address.
                        set end-ip {ipv4 address any}   End IP address.
                    next
            next
    next
end