Fortinet white logo
Fortinet white logo

CLI Reference

system geoip-override

system geoip-override

Use this command to configure GeoIP lookup overrides.

GeoIP looks up the IP addresses associated with geographic locations in the GeoIP database. However, in some cases, the lookup might not be accurate, such as when clients use a proxy or VPN. You can override the GeoIP lookup result by manually specifying the geographic locations of some IP addresses and ranges.

Note

Only IPv4 addresses are supported for GeoIP overrides.

Syntax

config system geoip-override

edit <profile_name>

[set description "<description_str>"]

config ip-ranges

edit <host_ipv4/mask>

[set comment "<comment_str>"]

end

next

end

Variable

Description

Default

<profile_name>

Enter a unique name.

comment "<comment_str>"

Enter a description or comment.

description "<description_str>"

Enter a description or comment.

<host_ipv4/mask>

Enterthe IPv4 address range or subnet that you want to include in the override.

Related topics

profile geoip-group

policy access-control delivery

policy access-control receive

policy ip

system geoip-override

system geoip-override

Use this command to configure GeoIP lookup overrides.

GeoIP looks up the IP addresses associated with geographic locations in the GeoIP database. However, in some cases, the lookup might not be accurate, such as when clients use a proxy or VPN. You can override the GeoIP lookup result by manually specifying the geographic locations of some IP addresses and ranges.

Note

Only IPv4 addresses are supported for GeoIP overrides.

Syntax

config system geoip-override

edit <profile_name>

[set description "<description_str>"]

config ip-ranges

edit <host_ipv4/mask>

[set comment "<comment_str>"]

end

next

end

Variable

Description

Default

<profile_name>

Enter a unique name.

comment "<comment_str>"

Enter a description or comment.

description "<description_str>"

Enter a description or comment.

<host_ipv4/mask>

Enterthe IPv4 address range or subnet that you want to include in the override.

Related topics

profile geoip-group

policy access-control delivery

policy access-control receive

policy ip