Fortinet white logo
Fortinet white logo

CLI Reference

profile ip-address-group

profile ip-address-group

Use this command to create groups of IP addresses.

IP groups include groups of IP addresses that are used when configuring access control rules. For information about access control rules, see cloud-api profile antivirus.

Syntax

config profile ip-address-group

edit <group_name>

[set comment "<comment_str>"]

config member

edit {<host_ipv4/mask> | <host_ipv4range>}

end

Variable

Description

Default

<group_name>

Enter the name of the IP address group.

comment "<comment_str>"

Enter a description or comment.

{<host_ipv4/mask> | <host_ipv4range>}

Enter the IP address and netmask that you want to include in the group.

For example, enter 10.10.10.10/24 or 10.10.10.0-10.10.10.255 to match a 24-bit subnet, or all addresses starting with 10.10.10. This will appear as 10.10.10.0/24 in objects that use the group such as access rules, with the 0 indicating that any value is matched in that position of the address.

Similarly, 10.10.10.10/32 matches only the 10.10.10.10 IP address.

To match any address, enter 0.0.0.0/0.

Related topics

cloud-api profile antivirus

profile ip-address-group

profile ip-address-group

Use this command to create groups of IP addresses.

IP groups include groups of IP addresses that are used when configuring access control rules. For information about access control rules, see cloud-api profile antivirus.

Syntax

config profile ip-address-group

edit <group_name>

[set comment "<comment_str>"]

config member

edit {<host_ipv4/mask> | <host_ipv4range>}

end

Variable

Description

Default

<group_name>

Enter the name of the IP address group.

comment "<comment_str>"

Enter a description or comment.

{<host_ipv4/mask> | <host_ipv4range>}

Enter the IP address and netmask that you want to include in the group.

For example, enter 10.10.10.10/24 or 10.10.10.0-10.10.10.255 to match a 24-bit subnet, or all addresses starting with 10.10.10. This will appear as 10.10.10.0/24 in objects that use the group such as access rules, with the 0 indicating that any value is matched in that position of the address.

Similarly, 10.10.10.10/32 matches only the 10.10.10.10 IP address.

To match any address, enter 0.0.0.0/0.

Related topics

cloud-api profile antivirus