Fortinet black logo

CLI Reference

system geoip-override

system geoip-override

Use this command to override geolocation mappings that are not correct in the FortiGate init's database.

config system geoip-override
    edit {name}
    # Configure geographical location mapping for IP address(es) to override mappings from FortiGuard.
        set name {string}   Location name. size[63]
        set description {string}   Description. size[127]
        set country-id {string}   Two character Country ID code. size[2]
        config ip-range
            edit {id}
            # Table of IP ranges assigned to country.
                set id {integer}   ID number for individual entry in the IP-Range table. range[0-65535]
                set start-ip {ipv4 address}   Starting IP address, inclusive, of the address range (format: xxx.xxx.xxx.xxx).
                set end-ip {ipv4 address}   Final IP address, inclusive, of the address range (format: xxx.xxx.xxx.xxx).
            next
    next
end

Additional information

The following section is for those options that require additional explanation.

country-id <country_code>

Enter the two-character country ID code.

description <description>

Enter a description for this geolocation override.

The maximum length is 127 characters.

name <name>

Enter a name for this geolocation override.

The limit is 63 characters.

config ip-range

Configure the table of IP ranges assigned to the country.

end-ip <IPv4_address>

Enter the last IP address of the range.

id <id>

Enter an integer ID for this range entry.

Possible values: 0 to 65535.

start-ip <IPv4_address>

Enter the first IP address of the range.

system geoip-override

Use this command to override geolocation mappings that are not correct in the FortiGate init's database.

config system geoip-override
    edit {name}
    # Configure geographical location mapping for IP address(es) to override mappings from FortiGuard.
        set name {string}   Location name. size[63]
        set description {string}   Description. size[127]
        set country-id {string}   Two character Country ID code. size[2]
        config ip-range
            edit {id}
            # Table of IP ranges assigned to country.
                set id {integer}   ID number for individual entry in the IP-Range table. range[0-65535]
                set start-ip {ipv4 address}   Starting IP address, inclusive, of the address range (format: xxx.xxx.xxx.xxx).
                set end-ip {ipv4 address}   Final IP address, inclusive, of the address range (format: xxx.xxx.xxx.xxx).
            next
    next
end

Additional information

The following section is for those options that require additional explanation.

country-id <country_code>

Enter the two-character country ID code.

description <description>

Enter a description for this geolocation override.

The maximum length is 127 characters.

name <name>

Enter a name for this geolocation override.

The limit is 63 characters.

config ip-range

Configure the table of IP ranges assigned to the country.

end-ip <IPv4_address>

Enter the last IP address of the range.

id <id>

Enter an integer ID for this range entry.

Possible values: 0 to 65535.

start-ip <IPv4_address>

Enter the first IP address of the range.