Fortigate 命令输出

原创

7layer 2012-05-31 11:50:27 博主文章分类：Fortinet ©著作权

文章标签 fortinet 文章分类 网络安全

©著作权归作者所有：来自51CTO博客作者7layer的原创作品，请联系作者获取转载授权，否则将追究法律责任

FGT60B3908616179 (address) # show
config firewall address
    edit "all"
    next
    edit "192.168.1.1"
        set associated-interface "wan1"
        set subnet 192.168.1.1 255.255.255.255
    next
    edit "192.168.1.2"
        set associated-interface "wan1"
        set subnet 192.168.1.2 255.255.255.255
    next
    edit "192.168.1.3"     // 只写了名字，没定义地址
    next
    edit "192.168.1.4"
        set subnet 192.168.1.4 255.255.255.255 // 这里不定义接口就是any 接口
    next
end

FGT60B3908616179 (address) # get
== [ all ]
name: all
== [ 192.168.1.1 ]
name: 192.168.1.1
== [ 192.168.1.2 ]
name: 192.168.1.2
== [ 192.168.1.3 ]
name: 192.168.1.3
== [ 192.168.1.4 ]
name: 192.168.1.4

FGT60B3908616179 (address) # edit 192.168.1.4

FGT60B3908616179 (192.168.1.4) # get
name                : 192.168.1.4
associated-interface: (null)
type                : ipmask
subnet              : 192.168.1.4 255.255.255.255

FGT60B3908616179 (address) # edit 192.168.1.2

FGT60B3908616179 (192.168.1.2) # get
name                : 192.168.1.2
associated-interface: wan1
type                : ipmask //默认类型为 ipmask
subnet              : 192.168.1.2 255.255.255.255

FGT60B3908616179 # config firewall address

FGT60B3908616179 (address) # edit 192.168.1.2

FGT60B3908616179 (192.168.1.2) # set associated-interface wan1

FGT60B3908616179 (192.168.1.2) # set associated-interface
<string> please input string value
dmz () interface
internal () interface
wan1 () interface
wan2 () interface

FGT60B3908616179 (192.168.1.2) # set
associated-interface    associated interface name
subnet                  Ip address and netmask
type                    type

FGT60B3908616179 (192.168.1.2) # set type
fqdn        fully qualified domain name
ipmask      IP/netmask
iprange     ip range
wildcard    IP/wildcard-netmask

FGT60B3908616179 (192.168.1.2) # set type ipmask

FGT60B3908616179 (192.168.1.2) # set subnet 192.168.1.2 255.255.255.255

FGT60B3908616179 (192.168.1.2) # end

FGT60B3908616179 # config firewall address