config firewall address6
Use this command to create the IPv6 address objects that you use in firewall rules.
You create address objects to specify matching source and destination addresses in policies.
The following policies use the firewall address objects:
• Firewall policies
• QoS policies
• Connection limit policies
Basic Steps
1. Create address objects.
2. Specify them when you configure your policies.
Before you begin:
• You must have read-write permission for firewall settings.
Syntax
config firewall address6
edit <No.>
set type {ip6-network | ip6-range}
set ip6-network <ip&netmask>
set ip6-min <class_ip>
set ip6-max <class_ip>
next
end
type | • ip6-network: address block • ip6-range: address range |
ip6-network | Specify a subnet using the address/mask notation. |
ip6-min | Specify the start of an address range. |
ip6-max | Specify the end of an address range. |
Example
FortiADC-VM # config firewall address6
FortiADC-VM (address6) # edit fw-dest-addr2
Add new entry 'fw-dest-addr2' for node 1856
FortiADC-VM (fw-dest-addr2) # get
type : ip6-network
ip6-network : ::/0
FortiADC-VM (fw-dest-addr2) # set ip6-network 2001:db8::/32
FortiADC-VM (fw-dest-addr2) # end