How to configure Interface, Address, and Firewall Policy on Fortigate in CLI Mode

To configure Interface, Address and Firewall Policy on FortiGate in CLI Mode

Introduction:

FortiGate firewalls are purpose-built security processers that allow the industry's best threat protection and performance for SSL-encrypted traffic by rendering granular visibility of applications, users, and IoT devices. These tools are designed to identify issues instantly and effectively.

Configuration:

Configure Interface by using the below command:

FortiGate-VM64 # config system interface
FortiGate-VM64 (interface) # edit port6
FortiGate-VM64 (port6) # set ip 192.168.5.1  255.255.255.0
FortiGate-VM64 (port6) # set allowaccess http
FortiGate-VM64 (port6) # end

Configure Firewall address by using the below command:

FortiGate-VM64 # config firewall address
FortiGate-VM64 (address) # edit "add1"
FortiGate-VM64 (add1) # set type ipmask
FortiGate-VM64 (add1) # set associated-interface ''
FortiGate-VM64 (add1) # set color 0
FortiGate-VM64 (add1) # set allow-routing disable
FortiGate-VM64 (add1) #  set subnet 192.168.5.1 255.255.255.0
FortiGate-VM64 (add1) # end

Configure Firewall policy by using below command:

FortiGate-VM64 # config firewall policy
FortiGate-VM64 (policy) # edit 1
FortiGate-VM64 (1) # set name "policy1"
FortiGate-VM64 (1) # set srcintf "port5"
FortiGate-VM64 (1) # set dstintf "port6"
FortiGate-VM64 (1) # set srcaddr "add1" 
FortiGate-VM64 (1) # set dstaddr "all"
FortiGate-VM64 (1) # set action accept
FortiGate-VM64 (1) # set schedule "always"
FortiGate-VM64 (1) # set service "ALL"
FortiGate-VM64 (1) # set logtraffic all
FortiGate-VM64 (1) #  end

With this method, the configuration of Interface, Address and Policy on FortiGate in CLI mode comes to an end.