Fortinet black logo

CLI Reference

config user quarantine

config user quarantine

Configure quarantine support.

config user quarantine
    Description: Configure quarantine support.
    set firewall-groups {string}
    set quarantine [enable|disable]
    config targets
        Description: Quarantine entry to hold multiple MACs.
        edit <entry>
            set description {string}
            config macs
                Description: Quarantine MACs.
                edit <mac>
                    set description {string}
                    set drop [disable|enable]
                    set parent {string}
                next
            end
        next
    end
    set traffic-policy {string}
end

config user quarantine

Parameter

Description

Type

Size

Default

firewall-groups

Firewall address group which includes all quarantine MAC address.

string

Maximum length: 79

quarantine

Enable/disable quarantine.

option

-

enable

Option

Description

enable

Enable quarantine.

disable

Disable quarantine.

traffic-policy *

Traffic policy for quarantined MACs.

string

Maximum length: 63

* This parameter may not exist in some models.

config targets

Parameter

Description

Type

Size

Default

entry

Quarantine entry name.

string

Maximum length: 63

description

Description for the quarantine entry.

string

Maximum length: 63

config macs

Parameter

Description

Type

Size

Default

mac

Quarantine MAC.

mac-address

Not Specified

00:00:00:00:00:00

description

Description for the quarantine MAC.

string

Maximum length: 63

drop

Enable/disable dropping of quarantined device traffic.

option

-

disable

Option

Description

disable

Sends quarantined device traffic to FortiGate.

enable

Blocks quarantined device traffic to FortiGate.

parent

Parent entry name.

string

Maximum length: 63

config user quarantine

Configure quarantine support.

config user quarantine
    Description: Configure quarantine support.
    set firewall-groups {string}
    set quarantine [enable|disable]
    config targets
        Description: Quarantine entry to hold multiple MACs.
        edit <entry>
            set description {string}
            config macs
                Description: Quarantine MACs.
                edit <mac>
                    set description {string}
                    set drop [disable|enable]
                    set parent {string}
                next
            end
        next
    end
    set traffic-policy {string}
end

config user quarantine

Parameter

Description

Type

Size

Default

firewall-groups

Firewall address group which includes all quarantine MAC address.

string

Maximum length: 79

quarantine

Enable/disable quarantine.

option

-

enable

Option

Description

enable

Enable quarantine.

disable

Disable quarantine.

traffic-policy *

Traffic policy for quarantined MACs.

string

Maximum length: 63

* This parameter may not exist in some models.

config targets

Parameter

Description

Type

Size

Default

entry

Quarantine entry name.

string

Maximum length: 63

description

Description for the quarantine entry.

string

Maximum length: 63

config macs

Parameter

Description

Type

Size

Default

mac

Quarantine MAC.

mac-address

Not Specified

00:00:00:00:00:00

description

Description for the quarantine MAC.

string

Maximum length: 63

drop

Enable/disable dropping of quarantined device traffic.

option

-

disable

Option

Description

disable

Sends quarantined device traffic to FortiGate.

enable

Blocks quarantined device traffic to FortiGate.

parent

Parent entry name.

string

Maximum length: 63