local-in-policy
Use this command to edit the configuration of an IPv4 local-in policy.
Syntax
config system local-in-policy
edit <id>
set action {accept | drop | reject}
set description <string>
set dport <integer>
set dst <ip&netmask>
set intf <string>
set protocol {tcp | tcp_udp | udp}
set src <ip&netmask>
end
end
|
Variable |
Description |
|---|---|
|
<id> |
Set the entry number. |
|
action {accept | drop | reject} |
Select the action to be performed on the traffic matching this policy:
|
|
description <string> |
Enter a description. |
|
dport <integer> |
Enter the destination port number (1 - 65535). |
|
dst <ip&netmask> |
Enter the destination IPv4 address and mask using the following format: xxx.xxx.xxx.xxx/xx. |
|
intf <string> |
Enter a name for the incoming interface. Enter port1, port2, port3....port12. |
|
protocol {tcp | tcp_udp | udp} |
Set the traffic protocol:
|
|
src <ip&netmask> |
Enter the source IPv6 address and mask using the following format: xxx.xxx.xxx.xxx/xx. |
|
FortiManager local-in policies support multiple entries when configuring ports, addresses, and interfaces. For example: config system local-in-policy edit 1 set description "IP group 123" set dport "22" "443" "80" "8080" "514" set dst "1.1.1.1/16" "2.2.2.2/24" "3.3.3.3/32" set intf "port1" "port2" set src "1.1.1.1/16" "2.2.2.2/24" |