Fortinet white logo
Fortinet white logo

CLI Reference

config firewall address6

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6
    Description: Configure IPv6 firewall addresses.
    edit <name>
        set uuid {uuid}
        set type [ipprefix|iprange|...]
        set sdn {string}
        set ip6 {ipv6-network}
        set start-ip {ipv6-address}
        set end-ip {ipv6-address}
        set fqdn {string}
        set country {string}
        set cache-ttl {integer}
        set color {integer}
        set obj-id {var-string}
        config list
            Description: IP address list.
            edit <ip>
            next
        end
        config tagging
            Description: Config object tagging.
            edit <name>
                set category {string}
                set tags <name1>, <name2>, ...
            next
        end
        set comment {var-string}
        set template {string}
        config subnet-segment
            Description: IPv6 subnet segments.
            edit <name>
                set type [any|specific]
                set value {string}
            next
        end
        set host-type [any|specific]
        set host {ipv6-address}
        set tenant {string}
        set epg-name {string}
        set sdn-tag {string}
        set fabric-object [enable|disable]
    next
end

config firewall address6

Parameter

Description

Type

Size

Default

name

Address name.

string

Maximum length: 79

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

type

Type of IPv6 address object.

option

-

ipprefix

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

sdn

SDN.

string

Maximum length: 35

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

fqdn

Fully qualified domain name.

string

Maximum length: 255

country

IPv6 addresses associated to a specific country.

string

Maximum length: 2

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI.

integer

Minimum value: 0 Maximum value: 32

0

obj-id

Object ID for NSX.

var-string

Maximum length: 255

comment

Comment.

var-string

Maximum length: 255

template

IPv6 address template.

string

Maximum length: 63

host-type

Host type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific host address.

host

Host Address.

ipv6-address

Not Specified

::

tenant

Tenant.

string

Maximum length: 35

epg-name

Endpoint group name.

string

Maximum length: 255

sdn-tag

SDN Tag.

string

Maximum length: 15

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

config list

Parameter

Description

Type

Size

Default

ip

IP.

string

Maximum length: 89

config tagging

Parameter

Description

Type

Size

Default

name

Tagging entry name.

string

Maximum length: 63

category

Tag category.

string

Maximum length: 63

tags <name>

Tags.

Tag name.

string

Maximum length: 79

config subnet-segment

Parameter

Description

Type

Size

Default

name

Name.

string

Maximum length: 63

type

Subnet segment type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Maximum length: 35

config firewall address6

config firewall address6

Configure IPv6 firewall addresses.

config firewall address6
    Description: Configure IPv6 firewall addresses.
    edit <name>
        set uuid {uuid}
        set type [ipprefix|iprange|...]
        set sdn {string}
        set ip6 {ipv6-network}
        set start-ip {ipv6-address}
        set end-ip {ipv6-address}
        set fqdn {string}
        set country {string}
        set cache-ttl {integer}
        set color {integer}
        set obj-id {var-string}
        config list
            Description: IP address list.
            edit <ip>
            next
        end
        config tagging
            Description: Config object tagging.
            edit <name>
                set category {string}
                set tags <name1>, <name2>, ...
            next
        end
        set comment {var-string}
        set template {string}
        config subnet-segment
            Description: IPv6 subnet segments.
            edit <name>
                set type [any|specific]
                set value {string}
            next
        end
        set host-type [any|specific]
        set host {ipv6-address}
        set tenant {string}
        set epg-name {string}
        set sdn-tag {string}
        set fabric-object [enable|disable]
    next
end

config firewall address6

Parameter

Description

Type

Size

Default

name

Address name.

string

Maximum length: 79

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

type

Type of IPv6 address object.

option

-

ipprefix

Option

Description

ipprefix

Uses the IP prefix to define a range of IPv6 addresses.

iprange

Range of IPv6 addresses between two specified addresses (inclusive).

fqdn

Fully qualified domain name.

geography

IPv6 addresses from a specified country.

dynamic

Dynamic address object for SDN.

template

Template.

sdn

SDN.

string

Maximum length: 35

ip6

IPv6 address prefix (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx).

ipv6-network

Not Specified

::/0

start-ip

First IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

end-ip

Final IP address (inclusive) in the range for the address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).

ipv6-address

Not Specified

::

fqdn

Fully qualified domain name.

string

Maximum length: 255

country

IPv6 addresses associated to a specific country.

string

Maximum length: 2

cache-ttl

Minimal TTL of individual IPv6 addresses in FQDN cache.

integer

Minimum value: 0 Maximum value: 86400

0

color

Integer value to determine the color of the icon in the GUI.

integer

Minimum value: 0 Maximum value: 32

0

obj-id

Object ID for NSX.

var-string

Maximum length: 255

comment

Comment.

var-string

Maximum length: 255

template

IPv6 address template.

string

Maximum length: 63

host-type

Host type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific host address.

host

Host Address.

ipv6-address

Not Specified

::

tenant

Tenant.

string

Maximum length: 35

epg-name

Endpoint group name.

string

Maximum length: 255

sdn-tag

SDN Tag.

string

Maximum length: 15

fabric-object

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

config list

Parameter

Description

Type

Size

Default

ip

IP.

string

Maximum length: 89

config tagging

Parameter

Description

Type

Size

Default

name

Tagging entry name.

string

Maximum length: 63

category

Tag category.

string

Maximum length: 63

tags <name>

Tags.

Tag name.

string

Maximum length: 79

config subnet-segment

Parameter

Description

Type

Size

Default

name

Name.

string

Maximum length: 63

type

Subnet segment type.

option

-

any

Option

Description

any

Wildcard.

specific

Specific subnet segment address.

value

Subnet segment value.

string

Maximum length: 35