Fortinet white logo
Fortinet white logo

CLI Reference

profile ip-address-group

profile ip-address-group

Use this command to create groups of IP addresses.

IP groups include groups of IP addresses that are used when configuring other features such as access control rules or mail relays.

Syntax

config profile ip-address-group

edit <group_name>

[set comment "<comment_str>"]

config member

edit {<host_ipv4/mask> | <host_ipv4range>}

next

next

end

Variable

Description

Default

<group_name>

Enter the name of the IP address group.

comment "<comment_str>"

Enter a description or comment.

{<host_ipv4/mask> | <host_ipv4range>}

Enter the IP address and netmask that you want to include in the group.

For example, enter 10.10.10.10/24 or 10.10.10.0-10.10.10.255 to match a 24-bit subnet, or all addresses starting with 10.10.10. This will appear as 10.10.10.0/24 in objects that use the group such as access rules, with the 0 indicating that any value is matched in that position of the address.

Similarly, 10.10.10.10/32 matches only the 10.10.10.10 IP address.

To match any address, enter 0.0.0.0/0.

Related topics

policy access-control delivery

mailsetting relay-host-list

profile ip-address-group

profile ip-address-group

Use this command to create groups of IP addresses.

IP groups include groups of IP addresses that are used when configuring other features such as access control rules or mail relays.

Syntax

config profile ip-address-group

edit <group_name>

[set comment "<comment_str>"]

config member

edit {<host_ipv4/mask> | <host_ipv4range>}

next

next

end

Variable

Description

Default

<group_name>

Enter the name of the IP address group.

comment "<comment_str>"

Enter a description or comment.

{<host_ipv4/mask> | <host_ipv4range>}

Enter the IP address and netmask that you want to include in the group.

For example, enter 10.10.10.10/24 or 10.10.10.0-10.10.10.255 to match a 24-bit subnet, or all addresses starting with 10.10.10. This will appear as 10.10.10.0/24 in objects that use the group such as access rules, with the 0 indicating that any value is matched in that position of the address.

Similarly, 10.10.10.10/32 matches only the 10.10.10.10 IP address.

To match any address, enter 0.0.0.0/0.

Related topics

policy access-control delivery

mailsetting relay-host-list