Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.2.2
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    firewall policy46

    Configure IPv4 to IPv6 policies.

      config firewall policy46
      Description: Configure IPv4 to IPv6 policies.
      edit <policyid>
          set permit-any-host [enable|disable]
          set uuid {uuid}
          set srcintf {string}
          set dstintf {string}
          set srcaddr <name1>, <name2>, ...
          set dstaddr <name1>, <name2>, ...
          set action [accept|deny]
          set status [enable|disable]
          set schedule {string}
          set service <name1>, <name2>, ...
          set logtraffic [enable|disable]
          set logtraffic-start [enable|disable]
          set traffic-shaper {string}
          set traffic-shaper-reverse {string}
          set per-ip-shaper {string}
          set fixedport [enable|disable]
          set tcp-mss-sender {integer}
          set tcp-mss-receiver {integer}
          set comments {var-string}
          set ippool [enable|disable]
          set poolname <name1>, <name2>, ...
      next
  end

    config firewall policy46

    Parameter Name Description Type Size
    permit-any-host Enable/disable allowing any host.
    enable: Allow any host.
    disable: Do not allow any host.
    		 option -
    uuid Universally Unique Identifier (UUID; automatically assigned but can be manually reset). uuid Not Specified
    srcintf Source interface name. string Maximum length: 35
    dstintf Destination interface name. string Maximum length: 35
    srcaddr <name> Source address objects.
    Address name.    		 string Maximum length: 79
    dstaddr <name> Destination address objects.
    Address name.    		 string Maximum length: 79
    action Accept or deny traffic matching the policy.
    accept: Accept matching traffic.
    deny: Deny matching traffic.
    		 option -
    status Enable/disable this policy.
    enable: Enable this policy.
    disable: Disable this policy.
    		 option -
    schedule Schedule name. string Maximum length: 35
    service <name> Service name.
    Service name.    		 string Maximum length: 79
    logtraffic Enable/disable traffic logging for this policy.
    enable: Enable traffic logging.
    disable: Disable traffic logging.
    		 option -
    logtraffic-start Record logs when a session starts and ends.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    traffic-shaper Traffic shaper. string Maximum length: 35
    traffic-shaper-reverse Reverse traffic shaper. string Maximum length: 35
    per-ip-shaper Per IP traffic shaper. string Maximum length: 35
    fixedport Enable/disable fixed port for this policy.
    enable: Enable fixed port for this policy.
    disable: Disable fixed port for this policy.
    		 option -
    tcp-mss-sender TCP Maximum Segment Size value of sender (0 - 65535, default = 0). integer Minimum value: 0 Maximum value: 65535
    tcp-mss-receiver TCP Maximum Segment Size value of receiver (0 - 65535, default = 0) integer Minimum value: 0 Maximum value: 65535
    comments Comment. var-string Maximum length: 1023
    ippool Enable/disable use of IP Pools for source NAT.
    enable: Enable use of IP Pools for source NAT.
    disable: Disable use of IP Pools for source NAT.
    		 option -
    poolname <name> IP Pool names.
    IP pool name.    		 string Maximum length: 79
    Previous
    Next

    firewall policy46

    Configure IPv4 to IPv6 policies.

      config firewall policy46
      Description: Configure IPv4 to IPv6 policies.
      edit <policyid>
          set permit-any-host [enable|disable]
          set uuid {uuid}
          set srcintf {string}
          set dstintf {string}
          set srcaddr <name1>, <name2>, ...
          set dstaddr <name1>, <name2>, ...
          set action [accept|deny]
          set status [enable|disable]
          set schedule {string}
          set service <name1>, <name2>, ...
          set logtraffic [enable|disable]
          set logtraffic-start [enable|disable]
          set traffic-shaper {string}
          set traffic-shaper-reverse {string}
          set per-ip-shaper {string}
          set fixedport [enable|disable]
          set tcp-mss-sender {integer}
          set tcp-mss-receiver {integer}
          set comments {var-string}
          set ippool [enable|disable]
          set poolname <name1>, <name2>, ...
      next
  end

    config firewall policy46

    Parameter Name Description Type Size
    permit-any-host Enable/disable allowing any host.
    enable: Allow any host.
    disable: Do not allow any host.
    		 option -
    uuid Universally Unique Identifier (UUID; automatically assigned but can be manually reset). uuid Not Specified
    srcintf Source interface name. string Maximum length: 35
    dstintf Destination interface name. string Maximum length: 35
    srcaddr <name> Source address objects.
    Address name.    		 string Maximum length: 79
    dstaddr <name> Destination address objects.
    Address name.    		 string Maximum length: 79
    action Accept or deny traffic matching the policy.
    accept: Accept matching traffic.
    deny: Deny matching traffic.
    		 option -
    status Enable/disable this policy.
    enable: Enable this policy.
    disable: Disable this policy.
    		 option -
    schedule Schedule name. string Maximum length: 35
    service <name> Service name.
    Service name.    		 string Maximum length: 79
    logtraffic Enable/disable traffic logging for this policy.
    enable: Enable traffic logging.
    disable: Disable traffic logging.
    		 option -
    logtraffic-start Record logs when a session starts and ends.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    traffic-shaper Traffic shaper. string Maximum length: 35
    traffic-shaper-reverse Reverse traffic shaper. string Maximum length: 35
    per-ip-shaper Per IP traffic shaper. string Maximum length: 35
    fixedport Enable/disable fixed port for this policy.
    enable: Enable fixed port for this policy.
    disable: Disable fixed port for this policy.
    		 option -
    tcp-mss-sender TCP Maximum Segment Size value of sender (0 - 65535, default = 0). integer Minimum value: 0 Maximum value: 65535
    tcp-mss-receiver TCP Maximum Segment Size value of receiver (0 - 65535, default = 0) integer Minimum value: 0 Maximum value: 65535
    comments Comment. var-string Maximum length: 1023
    ippool Enable/disable use of IP Pools for source NAT.
    enable: Enable use of IP Pools for source NAT.
    disable: Disable use of IP Pools for source NAT.
    		 option -
    poolname <name> IP Pool names.
    IP pool name.    		 string Maximum length: 79
    Previous
    Next