Forti Firewall IP Export

This article describes the process of exporting an IP in Forti Firewall.

Forti Firewall IP Export

1. config system interface
2. edit port1
3. set mode static
3.Set ip 10.196.10.254/24
4. Set allowaccess ping http https
4. END
5. Show (for control)
6. Show system interface (shows IP addresses)

Define a Forti firewall static route

1. config router static
2. edit 1
3. Set gateway 10.196.100.1
4. Set distance 10
5.Set device port1
6. Set DST 10.196.10.0 255.255.255.0
7. 	next
8. end

Define HTTP, PING, SSH, and other accesses for Forti Firewall Interface

1.config system interface
2.edit port2
3.set allowaccess http ping https ssh
4.end

Forti Ping
1. execute ping 10.0.100.1

Console IP identification process for Forti firewall version 7 devices

1. edit port1
2. set mode static
3. Set ip 192.168.0.100 255.255.255.0
4. next
5. END

* FORTI 7 - GATEWAY EXPORT

1. edit 1
2. Set device port1
3. Set gateway <class_ip>
4. next
5. END

* FORTI 7 - DNS EXPORT

1. config system dns
2. set primary <Primary DNS server>
3. set secondary <Secondary DNS server>
4. END

Set the IP addresses to be allowed access to the Forti firewall admin interface

Sample trusted host configuration:
# show
    # config system admin
        edit "admin-test"
            set trusthost1 10.10.10.1 255.255.255.255
            set trusthost2 192.168.0.0 255.255.0.0
            set vdom "root"
                # config dashboard-tabs
            ...
Changing the trusted host configuration:
# config system admin
    edit <admin user>
        set trusthost <1 to 10> <ip address>/<mask>
        set ip6-trusthost <1 to 10> <ip6 address>/<mask>

Arif Akyüz
Content Producer & Cyber Security Expert
[email protected]