local-in-policy6
Use this command to edit the configuration of an IPv6 local-in policy.
Syntax
config system local-in-policy6
edit <id>
set action {accept | drop | reject}
set description <string>
set dport <integer>
set dst <ip&netmask>
set intf <string>
set protocol {tcp | tcp_udp | udp}
set src <ip&netmask>
end
end
|
Variable |
Description |
|---|---|
|
<id> |
Set the entry number. |
|
action {accept | drop | reject} |
Select the action to be performed on the traffic matching this policy:
|
|
description <string> |
Enter a description. |
|
dport <integer> |
Enter the destination port number (1 - 65535). |
|
dst <IPv6 prefix> |
Enter the destination IPv6 address and prefix using the following format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx. |
|
intf <string> |
Enter a name for the incoming interface. Enter port1, port2, port3....port12. |
|
protocol {tcp | tcp_udp | udp} |
Set the traffic protocol:
|
|
src <IPv6 prefix> |
Enter the source IPv6 address and prefix using the following format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx. |
|
FortiManager local-in policies support multiple entries when configuring ports, addresses, and interfaces. For example: config system local-in-policy6 edit 1 set description "IPv6 group 123" set dport "22" "443" "80" "8080" "514" set dst6 "2001:db8:1::/48" "2001:db8:2::/64" "2001:db8:3::1/128" set intf "port1" "port2" set src6 "2001:db8:4::/48" "2001:db8:5::/64" |