Fortinet black logo

CLI Reference

config firewall policy46

config firewall policy46

Configure IPv4 to IPv6 policies.

config firewall policy46
    Description: Configure IPv4 to IPv6 policies.
    edit <policyid>
        set action [accept|deny]
        set comments {var-string}
        set dstaddr <name1>, <name2>, ...
        set dstintf {string}
        set fixedport [enable|disable]
        set ippool [enable|disable]
        set logtraffic [enable|disable]
        set logtraffic-start [enable|disable]
        set name {string}
        set per-ip-shaper {string}
        set permit-any-host [enable|disable]
        set poolname <name1>, <name2>, ...
        set schedule {string}
        set service <name1>, <name2>, ...
        set srcaddr <name1>, <name2>, ...
        set srcintf {string}
        set status [enable|disable]
        set tcp-mss-receiver {integer}
        set tcp-mss-sender {integer}
        set traffic-shaper {string}
        set traffic-shaper-reverse {string}
        set uuid {uuid}
    next
end

config firewall policy46

Parameter

Description

Type

Size

Default

action

Accept or deny traffic matching the policy.

option

-

deny

Option

Description

accept

Accept matching traffic.

deny

Deny matching traffic.

comments

Comment.

var-string

Maximum length: 1023

dstaddr <name>

Destination address objects.

Address name.

string

Maximum length: 79

dstintf

Destination interface name.

string

Maximum length: 35

fixedport

Enable/disable fixed port for this policy.

option

-

disable

Option

Description

enable

Enable fixed port for this policy.

disable

Disable fixed port for this policy.

ippool

Enable/disable use of IP Pools for source NAT.

option

-

disable

Option

Description

enable

Enable use of IP Pools for source NAT.

disable

Disable use of IP Pools for source NAT.

logtraffic

Enable/disable traffic logging for this policy.

option

-

disable

Option

Description

enable

Enable traffic logging.

disable

Disable traffic logging.

logtraffic-start

Record logs when a session starts and ends.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

name

Policy name.

string

Maximum length: 35

per-ip-shaper

Per IP traffic shaper.

string

Maximum length: 35

permit-any-host

Enable/disable allowing any host.

option

-

disable

Option

Description

enable

Allow any host.

disable

Do not allow any host.

policyid

Policy ID.

integer

Minimum value: 0 Maximum value: 4294967294

0

poolname <name>

IP Pool names.

IP pool name.

string

Maximum length: 79

schedule

Schedule name.

string

Maximum length: 35

service <name>

Service name.

Service name.

string

Maximum length: 79

srcaddr <name>

Source address objects.

Address name.

string

Maximum length: 79

srcintf

Source interface name.

string

Maximum length: 35

status

Enable/disable this policy.

option

-

enable

Option

Description

enable

Enable this policy.

disable

Disable this policy.

tcp-mss-receiver

TCP Maximum Segment Size value of receiver

integer

Minimum value: 0 Maximum value: 65535

0

tcp-mss-sender

TCP Maximum Segment Size value of sender.

integer

Minimum value: 0 Maximum value: 65535

0

traffic-shaper

Traffic shaper.

string

Maximum length: 35

traffic-shaper-reverse

Reverse traffic shaper.

string

Maximum length: 35

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

config firewall policy46

Configure IPv4 to IPv6 policies.

config firewall policy46
    Description: Configure IPv4 to IPv6 policies.
    edit <policyid>
        set action [accept|deny]
        set comments {var-string}
        set dstaddr <name1>, <name2>, ...
        set dstintf {string}
        set fixedport [enable|disable]
        set ippool [enable|disable]
        set logtraffic [enable|disable]
        set logtraffic-start [enable|disable]
        set name {string}
        set per-ip-shaper {string}
        set permit-any-host [enable|disable]
        set poolname <name1>, <name2>, ...
        set schedule {string}
        set service <name1>, <name2>, ...
        set srcaddr <name1>, <name2>, ...
        set srcintf {string}
        set status [enable|disable]
        set tcp-mss-receiver {integer}
        set tcp-mss-sender {integer}
        set traffic-shaper {string}
        set traffic-shaper-reverse {string}
        set uuid {uuid}
    next
end

config firewall policy46

Parameter

Description

Type

Size

Default

action

Accept or deny traffic matching the policy.

option

-

deny

Option

Description

accept

Accept matching traffic.

deny

Deny matching traffic.

comments

Comment.

var-string

Maximum length: 1023

dstaddr <name>

Destination address objects.

Address name.

string

Maximum length: 79

dstintf

Destination interface name.

string

Maximum length: 35

fixedport

Enable/disable fixed port for this policy.

option

-

disable

Option

Description

enable

Enable fixed port for this policy.

disable

Disable fixed port for this policy.

ippool

Enable/disable use of IP Pools for source NAT.

option

-

disable

Option

Description

enable

Enable use of IP Pools for source NAT.

disable

Disable use of IP Pools for source NAT.

logtraffic

Enable/disable traffic logging for this policy.

option

-

disable

Option

Description

enable

Enable traffic logging.

disable

Disable traffic logging.

logtraffic-start

Record logs when a session starts and ends.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

name

Policy name.

string

Maximum length: 35

per-ip-shaper

Per IP traffic shaper.

string

Maximum length: 35

permit-any-host

Enable/disable allowing any host.

option

-

disable

Option

Description

enable

Allow any host.

disable

Do not allow any host.

policyid

Policy ID.

integer

Minimum value: 0 Maximum value: 4294967294

0

poolname <name>

IP Pool names.

IP pool name.

string

Maximum length: 79

schedule

Schedule name.

string

Maximum length: 35

service <name>

Service name.

Service name.

string

Maximum length: 79

srcaddr <name>

Source address objects.

Address name.

string

Maximum length: 79

srcintf

Source interface name.

string

Maximum length: 35

status

Enable/disable this policy.

option

-

enable

Option

Description

enable

Enable this policy.

disable

Disable this policy.

tcp-mss-receiver

TCP Maximum Segment Size value of receiver

integer

Minimum value: 0 Maximum value: 65535

0

tcp-mss-sender

TCP Maximum Segment Size value of sender.

integer

Minimum value: 0 Maximum value: 65535

0

traffic-shaper

Traffic shaper.

string

Maximum length: 35

traffic-shaper-reverse

Reverse traffic shaper.

string

Maximum length: 35

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000