config firewall : config firewall address
 
config firewall address
Use this command to create the IPv4 address objects that you use in firewall rules.
You create address objects to specify matching source and destination addresses in policies.
The following policies use the firewall address objects:
Firewall policies
QoS policies
Connection limit policies
Basic Steps
1. Create address objects.
2. Specify them when you configure your policies.
Before you begin:
You must have read-write permission for firewall settings.
Syntax
config firewall address
edit <name>
set type {ip-netmask | ip-range}
set ip-netmask <ip&netmask>
set ip-min <class_ip>
set ip-max <class_ip>
next
end
type
ip-netmask: address block
ip-range: address range
ip-netmask
Specify a subnet using the address/mask notation.
ip-min
Specify the start of an address range.
ip-max
Specify the end of an address range.
Example
FortiADC-VM # config firewall address
FortiADC-VM (address) # edit fw-dest-addr1
Add new entry 'fw-dest-addr1' for node 1850
FortiADC-VM (fw-dest-addr1) # get
type : ip-netmask
ip-netmask : 0.0.0.0/0
FortiADC-VM (fw-dest-addr1) # set ip-netmask 192.0.2.0/24
FortiADC-VM (fw-dest-addr1) # end