Fortinet black logo

CLI Reference

config firewall address6

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6
    Description: Configure IPv6 firewall addresses.
    edit <name>
        set cache-ttl {integer}
        set color {integer}
        set comment {var-string}
        set country {string}
        set end-ip {ipv6-address}
        set fabric-object [enable|disable]
        set fqdn {string}
        set host {ipv6-address}
        set host-type [any|specific]
        set ip6 {ipv6-network}
        config list
            Description: IP address list.
            edit <ip>
                set ip {string}
            next
        end
        set macaddr <macaddr1>, <macaddr2>, ...
        set name {string}
        set obj-id {var-string}
        set sdn {string}
        set start-ip {ipv6-address}
        config subnet-segment
            Description: IPv6 subnet segments.
            edit <name>
                set name {string}
                set type [any|specific]
                set value {string}
            next
        end
        config tagging
            Description: Config object tagging.
            edit <name>
                set name {string}
                set category {string}
                set tags <name1>, <name2>, ...
            next
        end
        set template {string}
        set type [ipprefix|iprange|...]
        set uuid {uuid}
    next
end

config firewall address6

Parameter

Description

Type

Size

Default

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI.

integer

Minimum value: 0 Maximum value: 32

0

comment

Comment.

var-string

Not Specified

country

IPv6 addresses associated to a specific country.

string

Not Specified

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fqdn

Fully qualified domain name.

string

Not Specified

host

Host Address.

ipv6-address

Not Specified

::

host-type

Host type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific host address.

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

macaddr <macaddr>

Multiple MAC address ranges.

MAC address ranges <start>[-<end>] separated by space.

string

Maximum length: 127

name

Address name.

string

Not Specified

obj-id

Object ID for NSX.

var-string

Not Specified

sdn

SDN.

string

Not Specified

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

template

IPv6 address template.

string

Not Specified

type

Type of IPv6 address object.

option

-

ipprefix

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

mac

Range of MAC addresses.

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

config list

Parameter

Description

Type

Size

Default

ip

IP.

string

Not Specified

config subnet-segment

Parameter

Description

Type

Size

Default

name

Name.

string

Not Specified

type

Subnet segment type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Not Specified

config tagging

Parameter

Description

Type

Size

Default

name

Tagging entry name.

string

Not Specified

category

Tag category.

string

Not Specified

tags <name>

Tags.

Tag name.

string

Maximum length: 79

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6
    Description: Configure IPv6 firewall addresses.
    edit <name>
        set cache-ttl {integer}
        set color {integer}
        set comment {var-string}
        set country {string}
        set end-ip {ipv6-address}
        set fabric-object [enable|disable]
        set fqdn {string}
        set host {ipv6-address}
        set host-type [any|specific]
        set ip6 {ipv6-network}
        config list
            Description: IP address list.
            edit <ip>
                set ip {string}
            next
        end
        set macaddr <macaddr1>, <macaddr2>, ...
        set name {string}
        set obj-id {var-string}
        set sdn {string}
        set start-ip {ipv6-address}
        config subnet-segment
            Description: IPv6 subnet segments.
            edit <name>
                set name {string}
                set type [any|specific]
                set value {string}
            next
        end
        config tagging
            Description: Config object tagging.
            edit <name>
                set name {string}
                set category {string}
                set tags <name1>, <name2>, ...
            next
        end
        set template {string}
        set type [ipprefix|iprange|...]
        set uuid {uuid}
    next
end

config firewall address6

Parameter

Description

Type

Size

Default

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI.

integer

Minimum value: 0 Maximum value: 32

0

comment

Comment.

var-string

Not Specified

country

IPv6 addresses associated to a specific country.

string

Not Specified

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fqdn

Fully qualified domain name.

string

Not Specified

host

Host Address.

ipv6-address

Not Specified

::

host-type

Host type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific host address.

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

macaddr <macaddr>

Multiple MAC address ranges.

MAC address ranges <start>[-<end>] separated by space.

string

Maximum length: 127

name

Address name.

string

Not Specified

obj-id

Object ID for NSX.

var-string

Not Specified

sdn

SDN.

string

Not Specified

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

template

IPv6 address template.

string

Not Specified

type

Type of IPv6 address object.

option

-

ipprefix

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

mac

Range of MAC addresses.

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

config list

Parameter

Description

Type

Size

Default

ip

IP.

string

Not Specified

config subnet-segment

Parameter

Description

Type

Size

Default

name

Name.

string

Not Specified

type

Subnet segment type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Not Specified

config tagging

Parameter

Description

Type

Size

Default

name

Tagging entry name.

string

Not Specified

category

Tag category.

string

Not Specified

tags <name>

Tags.

Tag name.

string

Maximum length: 79