config firewall address
Use this command to create the IPv4 address objects that you use in firewall rules.
You create address objects to specify matching source and destination addresses in policies.
The following policies use the firewall address objects:
• Firewall policies
• QoS policies
• Connection limit policies
Basic Steps
1. Create address objects.
2. Specify them when you configure your policies.
Before you begin:
• You must have read-write permission for firewall settings.
Syntax
config firewall address
edit <name>
set type {ip-netmask | ip-range}
set ip-netmask <ip&netmask>
set ip-min <class_ip>
set ip-max <class_ip>
next
end
type | • ip-netmask: address block • ip-range: address range |
ip-netmask | Specify a subnet using the address/mask notation. |
ip-min | Specify the start of an address range. |
ip-max | Specify the end of an address range. |
Example
FortiADC-VM # config firewall address
FortiADC-VM (address) # edit fw-dest-addr1
Add new entry 'fw-dest-addr1' for node 1850
FortiADC-VM (fw-dest-addr1) # get
type : ip-netmask
ip-netmask : 0.0.0.0/0
FortiADC-VM (fw-dest-addr1) # set ip-netmask 192.0.2.0/24
FortiADC-VM (fw-dest-addr1) # end