Fortinet Document Library

Version:


Table of Contents

CLI Reference

6.0.0
Download PDF
Copy Link

firewall identity-based-route

Use this command to define identity-based routes.

config firewall identity-based-route
    edit {name}
    # Configure identity based routing.
        set name {string}   Name. size[35]
        set comments {string}   Comments. size[127]
        config rule
            edit {id}
            # Rule.
                set id {integer}   Rule ID. range[0-4294967295]
                set gateway {ipv4 address}   IPv4 address of the gateway (Format: xxx.xxx.xxx.xxx , Default: 0.0.0.0).
                set device {string}   Outgoing interface for the rule. size[35] - datasource(s): system.interface.name
                config groups
                    edit {name}
                    # Select one or more group(s) from available groups that are allowed to use this route. Separate group names with a space.
                        set name {string}   Group name. size[64] - datasource(s): user.group.name
                    next
            next
    next
end

Additional information

The following section is for those options that require additional explanation.

firewall identity-based-route

Use this command to define identity-based routes.

config firewall identity-based-route
    edit {name}
    # Configure identity based routing.
        set name {string}   Name. size[35]
        set comments {string}   Comments. size[127]
        config rule
            edit {id}
            # Rule.
                set id {integer}   Rule ID. range[0-4294967295]
                set gateway {ipv4 address}   IPv4 address of the gateway (Format: xxx.xxx.xxx.xxx , Default: 0.0.0.0).
                set device {string}   Outgoing interface for the rule. size[35] - datasource(s): system.interface.name
                config groups
                    edit {name}
                    # Select one or more group(s) from available groups that are allowed to use this route. Separate group names with a space.
                        set name {string}   Group name. size[64] - datasource(s): user.group.name
                    next
            next
    next
end

Additional information

The following section is for those options that require additional explanation.