Chapter 7 Firewall for FortiOS 5.0 : Building firewall objects and policies : ICMPv6 Service
  
ICMPv6 Service
The IT Manager is doing some diagnostics and would like to temporarily block the successful replies of ICMP Node information Responses between 2 IPv6 networks.
The ICMP type for ICMP Node informations responses is 140. The codes for a successful response is 0.
Web-based Manager Instructions
Go to Firewall Objects > Service > Services and select Create New > Custom Service.
Fill out the fields with the following information
Field Name
Field Value
Name
diagnostic-test1
Comments
<Input into this field is optional>
Service Type
Firewall
Color
<Changing this value is optional>
Show in Service List
Check in check box
Category
Uncategorized
Protocol Type
ICMP6
Type
140
Code
0
Select OK.
Enter the following CLI command:
config firewall service custom
edit diagnostic-test1
set protocol ICMP6
set icmptype 140
set icmpcode 0
set visibility enable
end
To verify that the category was added correctly:
Go to Firewall Objects > Service > Services. Check that the services have been added to the services list and that they are correct.
Enter the following CLI command:
config firewall service custom
edit <the name of the service that you wish to verify>
show full-configuration