12/11/2021 13:30 How to configure IPv4, Grouping and Policy in Fortigate Firewall?

– Technology Software Center

How to configure IPv4, Grouping and Policy in Fortigate Firewall?

Posted on 1 October 2019 by fadıl

In this article, we will give you some information about how to do routine operations such as IPv4 address creation, grouping, and policy creation on your
Fortigate Firewall devices through CLI console.

First you can access the CLI console via the web interface or SSH with Putty.

I want to give you some brief information about the commands first.

The
“Config“ command allows you to move to the configuration section.
The “Edit“ command is used to create or edit as needed.

The “Set” command is used to add and configure, IP, add

members, etc.

The “Next“ gives you a chance to make a new operation in the corresponding config directory.
The “End“ command is used to exit config. We can start now.

First, add an IP address,

We would like to add two IP addresses, “testugur” and “testugur2”.

1 config firewall address

2 edit “denemeugur”
3 set subnet 192.168.5.69 255.255.255.255
4 next
5 end

https://techsoftcenter.com/how-to-configure-ipv4-grouping-and-policy-in-fortigate-firewall/ 1/5
12/11/2021 13:30 How to configure IPv4, Grouping and Policy in Fortigate Firewall? – Technology Software Center

Fortigate Firewall

Fortigate Firewall

Now we create an IP group and add the IP addresses we created above to this group,

1 config firewall addrgrp

2 edit “denemegrup”
3 set member “denemeugur” “denemeugur2”
4 next
5 end

https://techsoftcenter.com/how-to-configure-ipv4-grouping-and-policy-in-fortigate-firewall/ 2/5
12/11/2021 13:30 How to configure IPv4, Grouping and Policy in Fortigate Firewall? – Technology Software Center

Fortigate Firewall

Now we control our operations through the firewall interface. If you look at our addresses and group has been created.

Fortigate Firewall

Now we create a policy rule. For example, we create a policy rule without restrictions.

1 config firewall policy    

2  
3 edit 55
4  

https://techsoftcenter.com/how-to-configure-ipv4-grouping-and-policy-in-fortigate-firewall/ 3/5
12/11/2021 13:30 How to configure IPv4, Grouping and Policy in Fortigate Firewall? – Technology Software Center
5 set name “testpolicyugur”
6 set srcintf “lan”
7 set dstintf “wan2”

Note: ID number for ”Edit 55 ”policy, If you give the ID number of a used policy, that policy will be edited.

1 set srcaddr “all”

2 set dstaddr “all”
3 set action accept

Note: set srcaddr “all“ da in this section we could specify the address group we created above and customize the rule to these addresses only.

1 set schedule “always”

2 set service “ALL”
3 next

https://techsoftcenter.com/how-to-configure-ipv4-grouping-and-policy-in-fortigate-firewall/ 4/5
12/11/2021 13:30 How to configure IPv4, Grouping and Policy in Fortigate Firewall? – Technology Software Center

Fortigate Firewall

We check from the web interface, no problems appear. We see that all the settings we specify are created as intended.

Fortigate Firewall

Fortigate Firewall

You can do the above and similar configuration tasks on the Fortigate firewall using the correct commands through the CLI console.

I hope it has been a useful article.

https://techsoftcenter.com/how-to-configure-ipv4-grouping-and-policy-in-fortigate-firewall/ 5/5