Fortinet black logo

CLI Reference

config firewall address6

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6
    Description: Configure IPv6 firewall addresses.
    edit <name>
        set cache-ttl {integer}
        set color {integer}
        set comment {var-string}
        set country {string}
        set end-ip {ipv6-address}
        set epg-name {string}
        set fabric-object [enable|disable]
        set fqdn {string}
        set host {ipv6-address}
        set host-type [any|specific]
        set ip6 {ipv6-network}
        config list
            Description: IP address list.
            edit <ip>
            next
        end
        set macaddr <macaddr1>, <macaddr2>, ...
        set obj-id {var-string}
        set sdn {string}
        set sdn-tag {string}
        set start-ip {ipv6-address}
        config subnet-segment
            Description: IPv6 subnet segments.
            edit <name>
                set type [any|specific]
                set value {string}
            next
        end
        config tagging
            Description: Config object tagging.
            edit <name>
                set category {string}
                set tags <name1>, <name2>, ...
            next
        end
        set template {string}
        set tenant {string}
        set type [ipprefix|iprange|...]
        set uuid {uuid}
    next
end

config firewall address6

Parameter

Description

Type

Size

Default

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI.

integer

Minimum value: 0 Maximum value: 32

0

comment

Comment.

var-string

Maximum length: 255

country

IPv6 addresses associated to a specific country.

string

Maximum length: 2

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

epg-name

Endpoint group name.

string

Maximum length: 255

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fqdn

Fully qualified domain name.

string

Maximum length: 255

host

Host Address.

ipv6-address

Not Specified

::

host-type

Host type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific host address.

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

macaddr <macaddr>

Multiple MAC address ranges.

MAC address ranges <start>[-<end>] separated by space.

string

Maximum length: 127

name

Address name.

string

Maximum length: 79

obj-id

Object ID for NSX.

var-string

Maximum length: 255

sdn

SDN.

string

Maximum length: 35

sdn-tag

SDN Tag.

string

Maximum length: 15

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

template

IPv6 address template.

string

Maximum length: 63

tenant

Tenant.

string

Maximum length: 35

type

Type of IPv6 address object.

option

-

ipprefix

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

mac

Range of MAC addresses.

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

config list

Parameter

Description

Type

Size

Default

ip

IP.

string

Maximum length: 89

config subnet-segment

Parameter

Description

Type

Size

Default

name

Name.

string

Maximum length: 63

type

Subnet segment type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Maximum length: 35

config tagging

Parameter

Description

Type

Size

Default

name

Tagging entry name.

string

Maximum length: 63

category

Tag category.

string

Maximum length: 63

tags <name>

Tags.

Tag name.

string

Maximum length: 79

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6
    Description: Configure IPv6 firewall addresses.
    edit <name>
        set cache-ttl {integer}
        set color {integer}
        set comment {var-string}
        set country {string}
        set end-ip {ipv6-address}
        set epg-name {string}
        set fabric-object [enable|disable]
        set fqdn {string}
        set host {ipv6-address}
        set host-type [any|specific]
        set ip6 {ipv6-network}
        config list
            Description: IP address list.
            edit <ip>
            next
        end
        set macaddr <macaddr1>, <macaddr2>, ...
        set obj-id {var-string}
        set sdn {string}
        set sdn-tag {string}
        set start-ip {ipv6-address}
        config subnet-segment
            Description: IPv6 subnet segments.
            edit <name>
                set type [any|specific]
                set value {string}
            next
        end
        config tagging
            Description: Config object tagging.
            edit <name>
                set category {string}
                set tags <name1>, <name2>, ...
            next
        end
        set template {string}
        set tenant {string}
        set type [ipprefix|iprange|...]
        set uuid {uuid}
    next
end

config firewall address6

Parameter

Description

Type

Size

Default

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI.

integer

Minimum value: 0 Maximum value: 32

0

comment

Comment.

var-string

Maximum length: 255

country

IPv6 addresses associated to a specific country.

string

Maximum length: 2

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

epg-name

Endpoint group name.

string

Maximum length: 255

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fqdn

Fully qualified domain name.

string

Maximum length: 255

host

Host Address.

ipv6-address

Not Specified

::

host-type

Host type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific host address.

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

macaddr <macaddr>

Multiple MAC address ranges.

MAC address ranges <start>[-<end>] separated by space.

string

Maximum length: 127

name

Address name.

string

Maximum length: 79

obj-id

Object ID for NSX.

var-string

Maximum length: 255

sdn

SDN.

string

Maximum length: 35

sdn-tag

SDN Tag.

string

Maximum length: 15

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

template

IPv6 address template.

string

Maximum length: 63

tenant

Tenant.

string

Maximum length: 35

type

Type of IPv6 address object.

option

-

ipprefix

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

mac

Range of MAC addresses.

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

config list

Parameter

Description

Type

Size

Default

ip

IP.

string

Maximum length: 89

config subnet-segment

Parameter

Description

Type

Size

Default

name

Name.

string

Maximum length: 63

type

Subnet segment type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Maximum length: 35

config tagging

Parameter

Description

Type

Size

Default

name

Tagging entry name.

string

Maximum length: 63

category

Tag category.

string

Maximum length: 63

tags <name>

Tags.

Tag name.

string

Maximum length: 79