Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.2.16
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    config firewall central-snat-map

    config firewall central-snat-map

    Configure central SNAT policies.

    config firewall central-snat-map
    Description: Configure central SNAT policies.
    edit <policyid>
        set comments {var-string}
        set dst-addr <name1>, <name2>, ...
        set dstintf <name1>, <name2>, ...
        set nat [disable|enable]
        set nat-ippool <name1>, <name2>, ...
        set nat-port {user}
        set orig-addr <name1>, <name2>, ...
        set orig-port {user}
        set protocol {integer}
        set srcintf <name1>, <name2>, ...
        set status [enable|disable]
    next
end

    config firewall central-snat-map

    Parameter

    Description

    Type

    Size

    comments

    Comment.

    var-string

    Maximum length: 1023

    dst-addr <name>

    Destination address name from available addresses.

    Address name.

    string

    Maximum length: 79

    dstintf <name>

    Destination interface name from available interfaces.

    Interface name.

    string

    Maximum length: 79

    nat

    Enable/disable source NAT.

    option

    -

    Option

    Description

    disable

    Disable source NAT.

    enable

    Enable source NAT.

    nat-ippool <name>

    Name of the IP pools to be used to translate addresses from available IP Pools.

    IP pool name.

    string

    Maximum length: 79

    nat-port

    Translated port or port range (0 to 65535).

    user

    Not Specified

    orig-addr <name>

    Original address.

    Address name.

    string

    Maximum length: 79

    orig-port

    Original TCP port (0 to 65535).

    user

    Not Specified

    policyid

    Policy ID.

    integer

    Minimum value: 0 Maximum value: 4294967295

    protocol

    Integer value for the protocol type.

    integer

    Minimum value: 0 Maximum value: 255

    srcintf <name>

    Source interface name from available interfaces.

    Interface name.

    string

    Maximum length: 79

    status

    Enable/disable the active status of this policy.

    option

    -

    Option

    Description

    enable

    Enable this policy.

    disable

    Disable this policy.
    Previous
    Next

    config firewall central-snat-map

    config firewall central-snat-map

    Configure central SNAT policies.

    config firewall central-snat-map
    Description: Configure central SNAT policies.
    edit <policyid>
        set comments {var-string}
        set dst-addr <name1>, <name2>, ...
        set dstintf <name1>, <name2>, ...
        set nat [disable|enable]
        set nat-ippool <name1>, <name2>, ...
        set nat-port {user}
        set orig-addr <name1>, <name2>, ...
        set orig-port {user}
        set protocol {integer}
        set srcintf <name1>, <name2>, ...
        set status [enable|disable]
    next
end

    config firewall central-snat-map

    Parameter

    Description

    Type

    Size

    comments

    Comment.

    var-string

    Maximum length: 1023

    dst-addr <name>

    Destination address name from available addresses.

    Address name.

    string

    Maximum length: 79

    dstintf <name>

    Destination interface name from available interfaces.

    Interface name.

    string

    Maximum length: 79

    nat

    Enable/disable source NAT.

    option

    -

    Option

    Description

    disable

    Disable source NAT.

    enable

    Enable source NAT.

    nat-ippool <name>

    Name of the IP pools to be used to translate addresses from available IP Pools.

    IP pool name.

    string

    Maximum length: 79

    nat-port

    Translated port or port range (0 to 65535).

    user

    Not Specified

    orig-addr <name>

    Original address.

    Address name.

    string

    Maximum length: 79

    orig-port

    Original TCP port (0 to 65535).

    user

    Not Specified

    policyid

    Policy ID.

    integer

    Minimum value: 0 Maximum value: 4294967295

    protocol

    Integer value for the protocol type.

    integer

    Minimum value: 0 Maximum value: 255

    srcintf <name>

    Source interface name from available interfaces.

    Interface name.

    string

    Maximum length: 79

    status

    Enable/disable the active status of this policy.

    option

    -

    Option

    Description

    enable

    Enable this policy.

    disable

    Disable this policy.
    Previous
    Next