Fortigate 命令输出

FGT60B3908616179 (address) # show
config firewall address
    edit "all"
    next
    edit "192.168.1.1"
        set associated-interface "wan1"
        set subnet 192.168.1.1 255.255.255.255
    next
    edit "192.168.1.2"
        set associated-interface "wan1"
        set subnet 192.168.1.2 255.255.255.255
    next
    edit "192.168.1.3"     // 只写了名字，没定义地址
    next
    edit "192.168.1.4"
        set subnet 192.168.1.4 255.255.255.255 // 这里不定义接口就是any 接口
    next
end

FGT60B3908616179 (address) # get
== [ all ]
name: all   
== [ 192.168.1.1 ]
name: 192.168.1.1   
== [ 192.168.1.2 ]
name: 192.168.1.2   
== [ 192.168.1.3 ]
name: 192.168.1.3   
== [ 192.168.1.4 ]
name: 192.168.1.4   

FGT60B3908616179 (address) # edit 192.168.1.4

FGT60B3908616179 (192.168.1.4) # get
name                : 192.168.1.4
associated-interface: (null)
type                : ipmask
subnet              : 192.168.1.4 255.255.255.255

FGT60B3908616179 (address) # edit 192.168.1.2

FGT60B3908616179 (192.168.1.2) # get
name                : 192.168.1.2
associated-interface: wan1
type                : ipmask  //默认类型为 ipmask
subnet              : 192.168.1.2 255.255.255.255

 

 

FGT60B3908616179 # config firewall address

FGT60B3908616179 (address) # edit 192.168.1.2

FGT60B3908616179 (192.168.1.2) # set associated-interface wan1

FGT60B3908616179 (192.168.1.2) # set associated-interface
<string>    please input string value
dmz ()  interface
internal ()     interface
wan1 () interface
wan2 () interface

FGT60B3908616179 (192.168.1.2) # set
associated-interface    associated interface name
subnet                  Ip address and netmask
type                    type
 
FGT60B3908616179 (192.168.1.2) # set type
fqdn        fully qualified domain name
ipmask      IP/netmask
iprange     ip range
wildcard    IP/wildcard-netmask
 
FGT60B3908616179 (192.168.1.2) # set type ipmask

FGT60B3908616179 (192.168.1.2) # set subnet 192.168.1.2 255.255.255.255

FGT60B3908616179 (192.168.1.2) # end

FGT60B3908616179 # config firewall address

FGT60B3908616179 (address) # show
config firewall address
    edit "all"
    next
    edit "192.168.1.1"
        set associated-interface "wan1"
        set subnet 192.168.1.1 255.255.255.255
    next
    edit "192.168.1.2"
        set associated-interface "wan1"
        set subnet 192.168.1.2 255.255.255.255
    next
end