FortiOS 5.4 Online Help Link FortiOS 5.2 Online Help Link FortiOS 5.0 Online Help Link FortiOS 4.3 Online Help Link

Home > Online Help

> Chapter 9 - Firewall > Building firewall objects and policies > Example: IPv4 Address Group

Example: IPv4 address group

Your company has a small division that is in Denmark that has a number of remote users that need to connect to a resource from either home, office or customer sites. The thing that they have in common is that there are all in Denmark. An address group needs to be created that will allow for this.

The preconfigured addresses to use will consist of:

  • Denmark - a geography based address
  • Denmark_ISP1 - a IP range of address of an ISP that services Denmark
  • Denmark_ISP2 - a IP range of address of another ISP that services Denmark
  • Denmark_Division - the FQDN of the Denmark office that uses Dynamic DNS
  1. Go to Policy & Objects> Objects > Addresses and select Create New > Address Group.
  2. Fill out the fields with the following information
Type IPv4 Group
Group Name Denmark_Users
Show in Address List <enable>
Members Denmark

Denmark_ISP1

Denmark_ISP2

Denmark_Division
Comments <Input into this field is optional>
  1. Select OK.
  2. Enter the following CLI command:

config firewall addrgrp

edit Denmark_Users

set member Denmark Denmark_ISP1 Denmark_ISP2 Denmark_Division

end

To verify that the addresses were added correctly:
  1. Go to Policy & Objects> Objects > Addresses. Check that the addresses have been added to the address list and that they are correct.
  2. Enter the following CLI command:

config firewall addgrp

edit <the name of the address that you wish to verify>

Show full-configuration