Fortinet black logo

CLI Reference

system firewall address

system firewall address

Use this command to configure IP addresses and address ranges that FortiWeb's built-in stateful firewall uses. You use the address configuration in a firewall policy. For details, see system firewall firewall-policy.

Syntax

config system firewall address

edit "<firewall-address_name>"

set type {ip-netmask | ip-range}

set ip-netmask "<firewall-address_ipv4mask>"

set ip-address-value "<firewall-address_ipv4>"

end

Variable Description Default

"<firewall-address_name>"

Enter a name that identifies this firewall address configuration. No default.

type {ip-netmask | ip-range}

Select how this configuration specifies a firewall address or addresses:

  • ip-netmask—A single IP address and netmask.
  • ip-range—A single IP address or a range of IP addresses.
ip-range

ip-netmask "<firewall-address_ipv4mask>"

Enter an IPv4 address and subnet mask, separated by a forward slash ( / ). For example, 192.0.2.2/24.

Available when type {ip-netmask | ip-range} is ip-netmask.

No default.

ip-address-value "<firewall-address_ipv4>"

Enter a single IP address or a range of addresses. For example, 192.0.2.1, or 192.0.2.1-192.0.2.256.

Available when type {ip-netmask | ip-range} is ip-range.
No default.

Related topics

system firewall address

Use this command to configure IP addresses and address ranges that FortiWeb's built-in stateful firewall uses. You use the address configuration in a firewall policy. For details, see system firewall firewall-policy.

Syntax

config system firewall address

edit "<firewall-address_name>"

set type {ip-netmask | ip-range}

set ip-netmask "<firewall-address_ipv4mask>"

set ip-address-value "<firewall-address_ipv4>"

end

Variable Description Default

"<firewall-address_name>"

Enter a name that identifies this firewall address configuration. No default.

type {ip-netmask | ip-range}

Select how this configuration specifies a firewall address or addresses:

  • ip-netmask—A single IP address and netmask.
  • ip-range—A single IP address or a range of IP addresses.
ip-range

ip-netmask "<firewall-address_ipv4mask>"

Enter an IPv4 address and subnet mask, separated by a forward slash ( / ). For example, 192.0.2.2/24.

Available when type {ip-netmask | ip-range} is ip-netmask.

No default.

ip-address-value "<firewall-address_ipv4>"

Enter a single IP address or a range of addresses. For example, 192.0.2.1, or 192.0.2.1-192.0.2.256.

Available when type {ip-netmask | ip-range} is ip-range.
No default.

Related topics