Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6

Description: Configure IPv6 firewall addresses.

edit <name>

set uuid {uuid}

set type [ipprefix|iprange|...]

set start-mac {mac-address}

set end-mac {mac-address}

set sdn {string}

set ip6 {ipv6-network}

set start-ip {ipv6-address}

set end-ip {ipv6-address}

set fqdn {string}

set country {string}

set cache-ttl {integer}

set color {integer}

set obj-id {var-string}

config list

Description: IP address list.

edit <ip>

next

end

config tagging

Description: Config object tagging

edit <name>

set category {string}

set tags <name1>, <name2>, ...

next

end

set comment {var-string}

set template {string}

config subnet-segment

Description: IPv6 subnet segments.

edit <name>

set type [any|specific]

set value {string}

next

end

set host-type [any|specific]

set host {ipv6-address}

set fabric-object [enable|disable]

next

end

config firewall address6

Parameter

Description

Type

Size

Default

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

type

Type of IPv6 address object (default = ipprefix).

option

-

ipprefix

 

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

mac

Range of MAC addresses.

start-mac

First MAC address in the range.

mac-address

Not Specified

00:00:00:00:00:00

end-mac

Last MAC address in the range.

mac-address

Not Specified

00:00:00:00:00:00

sdn

SDN.

string

Maximum length: 35

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

fqdn

Fully qualified domain name.

string

Maximum length: 255

country

IPv6 addresses associated to a specific country.

string

Maximum length: 2

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI (range 1 to 32, default = 0, which sets the value to 1).

integer

Minimum value: 0 Maximum value: 32

0

obj-id

Object ID for NSX.

var-string

Maximum length: 255

comment

Comment.

var-string

Maximum length: 255

template

IPv6 address template.

string

Maximum length: 63

host-type

Host type.

option

-

any

 

Option

Description

any

Wildcard.

specific

Specific host address.

host

Host Address.

ipv6-address

Not Specified

::

fabric-object

Security Fabric global object setting.

option

-

disable

 

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

config tagging

Parameter

Description

Type

Size

Default

category

Tag category.

string

Maximum length: 63

tags <name>

Tags.

Tag name.

string

Maximum length: 79

config subnet-segment

Parameter

Description

Type

Size

Default

type

Subnet segment type.

option

-

any

 

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Maximum length: 35

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6

Description: Configure IPv6 firewall addresses.

edit <name>

set uuid {uuid}

set type [ipprefix|iprange|...]

set start-mac {mac-address}

set end-mac {mac-address}

set sdn {string}

set ip6 {ipv6-network}

set start-ip {ipv6-address}

set end-ip {ipv6-address}

set fqdn {string}

set country {string}

set cache-ttl {integer}

set color {integer}

set obj-id {var-string}

config list

Description: IP address list.

edit <ip>

next

end

config tagging

Description: Config object tagging

edit <name>

set category {string}

set tags <name1>, <name2>, ...

next

end

set comment {var-string}

set template {string}

config subnet-segment

Description: IPv6 subnet segments.

edit <name>

set type [any|specific]

set value {string}

next

end

set host-type [any|specific]

set host {ipv6-address}

set fabric-object [enable|disable]

next

end

config firewall address6

Parameter

Description

Type

Size

Default

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

type

Type of IPv6 address object (default = ipprefix).

option

-

ipprefix

 

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

mac

Range of MAC addresses.

start-mac

First MAC address in the range.

mac-address

Not Specified

00:00:00:00:00:00

end-mac

Last MAC address in the range.

mac-address

Not Specified

00:00:00:00:00:00

sdn

SDN.

string

Maximum length: 35

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

fqdn

Fully qualified domain name.

string

Maximum length: 255

country

IPv6 addresses associated to a specific country.

string

Maximum length: 2

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI (range 1 to 32, default = 0, which sets the value to 1).

integer

Minimum value: 0 Maximum value: 32

0

obj-id

Object ID for NSX.

var-string

Maximum length: 255

comment

Comment.

var-string

Maximum length: 255

template

IPv6 address template.

string

Maximum length: 63

host-type

Host type.

option

-

any

 

Option

Description

any

Wildcard.

specific

Specific host address.

host

Host Address.

ipv6-address

Not Specified

::

fabric-object

Security Fabric global object setting.

option

-

disable

 

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

config tagging

Parameter

Description

Type

Size

Default

category

Tag category.

string

Maximum length: 63

tags <name>

Tags.

Tag name.

string

Maximum length: 79

config subnet-segment

Parameter

Description

Type

Size

Default

type

Subnet segment type.

option

-

any

 

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Maximum length: 35