Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.4.1
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    firewall local-in-policy

    Configure user defined IPv4 local-in policies.

      config firewall local-in-policy
      Description: Configure user defined IPv4 local-in policies.
      edit <policyid>
          set uuid {uuid}
          set ha-mgmt-intf-only [enable|disable]
          set intf {string}
          set srcaddr <name1>, <name2>, ...
          set dstaddr <name1>, <name2>, ...
          set action [accept|deny]
          set service <name1>, <name2>, ...
          set schedule {string}
          set status [enable|disable]
          set comments {var-string}
      next
  end

    config firewall local-in-policy

    Parameter Name Description Type Size
    uuid Universally Unique Identifier (UUID; automatically assigned but can be manually reset). uuid Not Specified
    ha-mgmt-intf-only Enable/disable dedicating the HA management interface only for local-in policy.
    enable: Enable dedicating HA management interface only for local-in policy.
    disable: Disable dedicating HA management interface only for local-in policy.
    		 option -
    intf Incoming interface name from available options. string Maximum length: 35
    srcaddr <name> Source address object from available options.
    Address name.    		 string Maximum length: 79
    dstaddr <name> Destination address object from available options.
    Address name.    		 string Maximum length: 79
    action Action performed on traffic matching the policy (default = deny).
    accept: Allow traffic matching this policy.
    deny: Deny or block traffic matching this policy.
    		 option -
    service <name> Service object from available options.
    Service name.    		 string Maximum length: 79
    schedule Schedule object from available options. string Maximum length: 35
    status Enable/disable this local-in policy.
    enable: Enable this local-in policy.
    disable: Disable this local-in policy.
    		 option -
    comments Comment. var-string Maximum length: 1023
    Previous
    Next

    firewall local-in-policy

    Configure user defined IPv4 local-in policies.

      config firewall local-in-policy
      Description: Configure user defined IPv4 local-in policies.
      edit <policyid>
          set uuid {uuid}
          set ha-mgmt-intf-only [enable|disable]
          set intf {string}
          set srcaddr <name1>, <name2>, ...
          set dstaddr <name1>, <name2>, ...
          set action [accept|deny]
          set service <name1>, <name2>, ...
          set schedule {string}
          set status [enable|disable]
          set comments {var-string}
      next
  end

    config firewall local-in-policy

    Parameter Name Description Type Size
    uuid Universally Unique Identifier (UUID; automatically assigned but can be manually reset). uuid Not Specified
    ha-mgmt-intf-only Enable/disable dedicating the HA management interface only for local-in policy.
    enable: Enable dedicating HA management interface only for local-in policy.
    disable: Disable dedicating HA management interface only for local-in policy.
    		 option -
    intf Incoming interface name from available options. string Maximum length: 35
    srcaddr <name> Source address object from available options.
    Address name.    		 string Maximum length: 79
    dstaddr <name> Destination address object from available options.
    Address name.    		 string Maximum length: 79
    action Action performed on traffic matching the policy (default = deny).
    accept: Allow traffic matching this policy.
    deny: Deny or block traffic matching this policy.
    		 option -
    service <name> Service object from available options.
    Service name.    		 string Maximum length: 79
    schedule Schedule object from available options. string Maximum length: 35
    status Enable/disable this local-in policy.
    enable: Enable this local-in policy.
    disable: Disable this local-in policy.
    		 option -
    comments Comment. var-string Maximum length: 1023
    Previous
    Next