Configuring Addresses - Fortinet FortiGate FortiGate-1000A Administration Manual

Firewall

Configuring addresses

FortiGate-1000A/FA2 Administration Guide
An IP/Mask address can represent:
• The address of a subnet (for example, for a class C subnet,
IP address: 192.168.20.0 and Netmask: 255.255.255.0).
• A single IP address (for example, IP Address: 192.168.20.1 and
Netmask: 255.255.255.255)
• All possible IP addresses (represented by IP Address: 0.0.0.0 and Netmask:
0.0.0.0)
An IP address can be:
• The IP address of a single computer (for example, 192.45.46.45).
• The IP address of a subnetwork (for example, 192.168.1.0 for a class C subnet).
• 0.0.0.0 to represent all possible IP addresses
The netmask corresponds to the type of address that you are adding. For example:
• The netmask for the IP address of a single computer should be 255.255.255.255.
• The netmask for a class A subnet should be 255.0.0.0.
• The netmask for a class B subnet should be 255.255.0.0.
• The netmask for a class C subnet should be 255.255.255.0.
• The netmask for all addresses should be 0.0.0.0
An IP Range address represents:
• A range of IP addresses in a subnet (for example, 192.168.20.1 to 192.168.20.10)
Note: IP address: 0.0.0.0 and Netmask: 255.255.255.255 is not a valid firewall address.
To add an address
1 Go to Firewall > Address.
2 Select Create New.
3 Enter a name to identify the address.
4 Enter the IP address and netmask or the IP address range.
5 Select OK.
To edit an address
Edit an address to change its IP information. You cannot edit the address name.
1 Go to Firewall > Address > Address.
2 Select the Edit icon beside the address you want to edit.
3 Make any required changes.
Note: To change the address name you must delete the address and add it again with a new
name. To avoid confusion in firewall policies, an address and a virtual IP cannot have the same
name.
4 Select OK.
01-28011-0254-20051115
Address
215