Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.2.5
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    firewall policy64

    Configure IPv6 to IPv4 policies.

      config firewall policy64
      Description: Configure IPv6 to IPv4 policies.
      edit <policyid>
          set uuid {uuid}
          set srcintf {string}
          set dstintf {string}
          set srcaddr <name1>, <name2>, ...
          set dstaddr <name1>, <name2>, ...
          set action [accept|deny]
          set status [enable|disable]
          set schedule {string}
          set service <name1>, <name2>, ...
          set logtraffic [enable|disable]
          set logtraffic-start [enable|disable]
          set permit-any-host [enable|disable]
          set traffic-shaper {string}
          set traffic-shaper-reverse {string}
          set per-ip-shaper {string}
          set fixedport [enable|disable]
          set ippool [enable|disable]
          set poolname <name1>, <name2>, ...
          set tcp-mss-sender {integer}
          set tcp-mss-receiver {integer}
          set comments {var-string}
      next
  end

    config firewall policy64

    Parameter Name Description Type Size
    uuid Universally Unique Identifier (UUID; automatically assigned but can be manually reset). uuid Not Specified
    srcintf Source interface name. string Maximum length: 35
    dstintf Destination interface name. string Maximum length: 35
    srcaddr <name> Source address name.
    Address name.    		 string Maximum length: 79
    dstaddr <name> Destination address name.
    Address name.    		 string Maximum length: 79
    action Policy action.
    accept: Action accept.
    deny: Action deny.
    		 option -
    status Enable/disable policy status.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    schedule Schedule name. string Maximum length: 35
    service <name> Service name.
    Address name.    		 string Maximum length: 79
    logtraffic Enable/disable policy log traffic.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    logtraffic-start Record logs when a session starts and ends.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    permit-any-host Enable/disable permit any host in.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    traffic-shaper Traffic shaper. string Maximum length: 35
    traffic-shaper-reverse Reverse traffic shaper. string Maximum length: 35
    per-ip-shaper Per-IP traffic shaper. string Maximum length: 35
    fixedport Enable/disable policy fixed port.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    ippool Enable/disable policy64 IP pool.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    poolname <name> Policy IP pool names.
    IP pool name.    		 string Maximum length: 79
    tcp-mss-sender TCP MSS value of sender. integer Minimum value: 0 Maximum value: 65535
    tcp-mss-receiver TCP MSS value of receiver. integer Minimum value: 0 Maximum value: 65535
    comments Comment. var-string Maximum length: 1023
    Previous
    Next

    firewall policy64

    Configure IPv6 to IPv4 policies.

      config firewall policy64
      Description: Configure IPv6 to IPv4 policies.
      edit <policyid>
          set uuid {uuid}
          set srcintf {string}
          set dstintf {string}
          set srcaddr <name1>, <name2>, ...
          set dstaddr <name1>, <name2>, ...
          set action [accept|deny]
          set status [enable|disable]
          set schedule {string}
          set service <name1>, <name2>, ...
          set logtraffic [enable|disable]
          set logtraffic-start [enable|disable]
          set permit-any-host [enable|disable]
          set traffic-shaper {string}
          set traffic-shaper-reverse {string}
          set per-ip-shaper {string}
          set fixedport [enable|disable]
          set ippool [enable|disable]
          set poolname <name1>, <name2>, ...
          set tcp-mss-sender {integer}
          set tcp-mss-receiver {integer}
          set comments {var-string}
      next
  end

    config firewall policy64

    Parameter Name Description Type Size
    uuid Universally Unique Identifier (UUID; automatically assigned but can be manually reset). uuid Not Specified
    srcintf Source interface name. string Maximum length: 35
    dstintf Destination interface name. string Maximum length: 35
    srcaddr <name> Source address name.
    Address name.    		 string Maximum length: 79
    dstaddr <name> Destination address name.
    Address name.    		 string Maximum length: 79
    action Policy action.
    accept: Action accept.
    deny: Action deny.
    		 option -
    status Enable/disable policy status.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    schedule Schedule name. string Maximum length: 35
    service <name> Service name.
    Address name.    		 string Maximum length: 79
    logtraffic Enable/disable policy log traffic.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    logtraffic-start Record logs when a session starts and ends.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    permit-any-host Enable/disable permit any host in.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    traffic-shaper Traffic shaper. string Maximum length: 35
    traffic-shaper-reverse Reverse traffic shaper. string Maximum length: 35
    per-ip-shaper Per-IP traffic shaper. string Maximum length: 35
    fixedport Enable/disable policy fixed port.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    ippool Enable/disable policy64 IP pool.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    poolname <name> Policy IP pool names.
    IP pool name.    		 string Maximum length: 79
    tcp-mss-sender TCP MSS value of sender. integer Minimum value: 0 Maximum value: 65535
    tcp-mss-receiver TCP MSS value of receiver. integer Minimum value: 0 Maximum value: 65535
    comments Comment. var-string Maximum length: 1023
    Previous
    Next