New Member

Solved

No dumb question: Firewall IPv4 address object

Forum|Forum|6 years ago
August 12, 2019
1 reply
4157 views

the format/syntax for creating an address object on FortiGate (5.x and 6.x) is

Name:

Subnet/IP range:

Do you put the IP in the name?

If not then would the "Subnet/IP range:" be the place to put the actual IP? and if so would the following be correct syntax ?

192.168.10.10/32

or

192.168.10.10 255.255.255.255

Thanks in advance

Best answer by brycemd

The name is just for your reference.

Subnet can be either cidr or full mask:

192.168.10.10/32 192.168.10.10/255.255.255.255

Or, an IP Range:

192.168.10.10-192.168.10.40

New Member

The name is just for your reference.

Subnet can be either cidr or full mask:

192.168.10.10/32 192.168.10.10/255.255.255.255

Or, an IP Range:

192.168.10.10-192.168.10.40

tiktokAuthor

New Member

Looks like ive been doing it wrong the whole time....................lots fo work to do :) lol

SuperUser

BTW, name is not only for human reading, but other part like FW policies refer to it. "set comment <comments>" is only for human reference.