New Access List Entry; Prefix List - Fortinet FortiGate FortiGate-1000 Administration Manual

Router

New access list entry

Prefix list

FortiGate-1000 Administration Guide
To add an access list name
1 Go to Router > Router Objects > Access List.
2 Select Create New.
3 Enter a name for the access list.
4 Select OK.
Figure 68: Access list entry configuration
list Entry
Action
Prefix
Exact match
To configure an access list entry
1 Go to Router > Router Objects > Access List.
2 Select the Add access-list entry icon to add a new access list entry or select the edit
icon beside an existing access list entry to edit that entry.
3 Select Permit or Deny for the Action to take for the prefix in this access list entry.
4 Select either Match any or Match a network address.
5 If you selected Match a network address, enter the IP address and netmask that
define the prefix for this access list entry.
6 Select Exact match if required.
7 Select OK.
A prefix list is an enhanced version of an access list that allows you to control the
length of the prefix netmask.
Each rule in a prefix list consists of a prefix (IP address and netmask), the action to
take for this prefix (permit or deny), and maximum and minimum prefix length settings.
The access list name and the number of this entry.
Set the action to take for this prefix to Permit or Deny.
Select Match any to match any prefix. Select Match a network address
and enter the prefix (IP address and netmask) for this access list rule.
By default, access list rules are matched on the prefix or any more
specific prefix. Enable Exact match to match only the configured prefix.
01-28006-0009-20041105
Router objects
157