FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
anandpatel
Staff
Staff
Article Id 197293
Description
This article explains how to use Automatic Address Creation for Attached Networks.

For all interfaces set to a LAN or DMZ role, a new option is available to automatically create an address object for the connected network.
This feature helps to update address automatically along with network interface IP-subnet update.
Solution
The new Create address object matching subnet option is displayed in the GUI when Role is set to LAN or DMZ. The feature not available for WAN or undefined Role in Interface.

When Role is set to LAN, the Create address object matching subnet option is displayed:


When Role is set to DMZ, the Create address object matching subnet option is displayed:




The Create address object matching subnet option is hidden in the GUI when Role is set to WAN or Undefined:

When Role is set to WAN, the Create address object matching subnet option is hidden:


When Role is set to Undefined, the Create address object matching subnet option is hidden:


When the Created address object matching subnet option is enabled, the new address object displays on the Policy & Objects -> Address page




When using the CLI, the following options are available:
#config firewall address
edit "port10 address"
set type interface-subnet
set subnet 192.168.1.1 255.255.255.0
set interface "port10"
        next
end

Contributors