Fortinet black logo

CLI Reference

config firewall central-snat-map

config firewall central-snat-map

Configure central SNAT policies.

config firewall central-snat-map
    Description: Configure central SNAT policies.
    edit <policyid>
        set comments {var-string}
        set dst-addr <name1>, <name2>, ...
        set dstintf <name1>, <name2>, ...
        set nat [disable|enable]
        set nat-ippool <name1>, <name2>, ...
        set nat-port {user}
        set orig-addr <name1>, <name2>, ...
        set orig-port {user}
        set protocol {integer}
        set srcintf <name1>, <name2>, ...
        set status [enable|disable]
    next
end

config firewall central-snat-map

Parameter

Description

Type

Size

comments

Comment.

var-string

Maximum length: 1023

dst-addr <name>

Destination address name from available addresses.

Address name.

string

Maximum length: 79

dstintf <name>

Destination interface name from available interfaces.

Interface name.

string

Maximum length: 79

nat

Enable/disable source NAT.

option

-

Option

Description

disable

Disable source NAT.

enable

Enable source NAT.

nat-ippool <name>

Name of the IP pools to be used to translate addresses from available IP Pools.

IP pool name.

string

Maximum length: 79

nat-port

Translated port or port range (0 to 65535).

user

Not Specified

orig-addr <name>

Original address.

Address name.

string

Maximum length: 79

orig-port

Original TCP port (0 to 65535).

user

Not Specified

policyid

Policy ID.

integer

Minimum value: 0 Maximum value: 4294967295

protocol

Integer value for the protocol type.

integer

Minimum value: 0 Maximum value: 255

srcintf <name>

Source interface name from available interfaces.

Interface name.

string

Maximum length: 79

status

Enable/disable the active status of this policy.

option

-

Option

Description

enable

Enable this policy.

disable

Disable this policy.

config firewall central-snat-map

Configure central SNAT policies.

config firewall central-snat-map
    Description: Configure central SNAT policies.
    edit <policyid>
        set comments {var-string}
        set dst-addr <name1>, <name2>, ...
        set dstintf <name1>, <name2>, ...
        set nat [disable|enable]
        set nat-ippool <name1>, <name2>, ...
        set nat-port {user}
        set orig-addr <name1>, <name2>, ...
        set orig-port {user}
        set protocol {integer}
        set srcintf <name1>, <name2>, ...
        set status [enable|disable]
    next
end

config firewall central-snat-map

Parameter

Description

Type

Size

comments

Comment.

var-string

Maximum length: 1023

dst-addr <name>

Destination address name from available addresses.

Address name.

string

Maximum length: 79

dstintf <name>

Destination interface name from available interfaces.

Interface name.

string

Maximum length: 79

nat

Enable/disable source NAT.

option

-

Option

Description

disable

Disable source NAT.

enable

Enable source NAT.

nat-ippool <name>

Name of the IP pools to be used to translate addresses from available IP Pools.

IP pool name.

string

Maximum length: 79

nat-port

Translated port or port range (0 to 65535).

user

Not Specified

orig-addr <name>

Original address.

Address name.

string

Maximum length: 79

orig-port

Original TCP port (0 to 65535).

user

Not Specified

policyid

Policy ID.

integer

Minimum value: 0 Maximum value: 4294967295

protocol

Integer value for the protocol type.

integer

Minimum value: 0 Maximum value: 255

srcintf <name>

Source interface name from available interfaces.

Interface name.

string

Maximum length: 79

status

Enable/disable the active status of this policy.

option

-

Option

Description

enable

Enable this policy.

disable

Disable this policy.