Fortinet white logo
Fortinet white logo

CLI Reference

config firewall addrgrp

config firewall addrgrp

Configure IPv4 address groups.

config firewall addrgrp
    Description: Configure IPv4 address groups.
    edit <name>
        set allow-routing [enable|disable]
        set color {integer}
        set comment {var-string}
        set exclude [enable|disable]
        set exclude-member <name1>, <name2>, ...
        set fabric-object [enable|disable]
        set member <name1>, <name2>, ...
        set name {string}
        config tagging
            Description: Config object tagging.
            edit <name>
                set name {string}
                set category {string}
                set tags <name1>, <name2>, ...
            next
        end
        set type [default|folder]
        set uuid {uuid}
    next
end

config firewall addrgrp

Parameter

Description

Type

Size

Default

allow-routing

Enable/disable use of this group in the static route configuration.

option

-

disable

Option

Description

enable

Enable use of this group in the static route configuration.

disable

Disable use of this group in the static route configuration.

color

Color of icon on the GUI.

integer

Minimum value: 0 Maximum value: 32

0

comment

Comment.

var-string

Not Specified

exclude

Enable/disable address exclusion.

option

-

disable

Option

Description

enable

Enable address exclusion.

disable

Disable address exclusion.

exclude-member <name>

Address exclusion member.

Address name.

string

Maximum length: 79

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

member <name>

Address objects contained within the group.

Address name.

string

Maximum length: 79

name

Address group name.

string

Not Specified

type

Address group type.

option

-

default

Option

Description

default

Default address group type (address may belong to multiple groups).

folder

Address folder group (members may not belong to any other group).

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

config tagging

Parameter

Description

Type

Size

Default

name

Tagging entry name.

string

Not Specified

category

Tag category.

string

Not Specified

tags <name>

Tags.

Tag name.

string

Maximum length: 79

config firewall addrgrp

config firewall addrgrp

Configure IPv4 address groups.

config firewall addrgrp
    Description: Configure IPv4 address groups.
    edit <name>
        set allow-routing [enable|disable]
        set color {integer}
        set comment {var-string}
        set exclude [enable|disable]
        set exclude-member <name1>, <name2>, ...
        set fabric-object [enable|disable]
        set member <name1>, <name2>, ...
        set name {string}
        config tagging
            Description: Config object tagging.
            edit <name>
                set name {string}
                set category {string}
                set tags <name1>, <name2>, ...
            next
        end
        set type [default|folder]
        set uuid {uuid}
    next
end

config firewall addrgrp

Parameter

Description

Type

Size

Default

allow-routing

Enable/disable use of this group in the static route configuration.

option

-

disable

Option

Description

enable

Enable use of this group in the static route configuration.

disable

Disable use of this group in the static route configuration.

color

Color of icon on the GUI.

integer

Minimum value: 0 Maximum value: 32

0

comment

Comment.

var-string

Not Specified

exclude

Enable/disable address exclusion.

option

-

disable

Option

Description

enable

Enable address exclusion.

disable

Disable address exclusion.

exclude-member <name>

Address exclusion member.

Address name.

string

Maximum length: 79

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

member <name>

Address objects contained within the group.

Address name.

string

Maximum length: 79

name

Address group name.

string

Not Specified

type

Address group type.

option

-

default

Option

Description

default

Default address group type (address may belong to multiple groups).

folder

Address folder group (members may not belong to any other group).

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

config tagging

Parameter

Description

Type

Size

Default

name

Tagging entry name.

string

Not Specified

category

Tag category.

string

Not Specified

tags <name>

Tags.

Tag name.

string

Maximum length: 79