[Fortinet] Fortigate CLI Commands - Service Port(서비스 포트) 생성

- Service Port 생성

#config vdom
#edit Vdom명
#config firewall service custom
#edit Port_Name - 생성시 포트 종류와 포트번호를 같이 맵핑하는 것을 추천
#set category General - 일반적인 포트는 General 카테고리에 넣어서 사용(당연히 카테고리도 개별 생성 가능)
#set tcp-portrange Port -포트 한개만 설정 시, range가 아닌 최소값 하나만 설정해도 가능(범위 설정은 최소값 - 최대값 )
#next / end - 연속된 저장은 next, 저장하면서 상단으로 빠져나가기는 end

#set 옵션은 아래에서 확인


예시)
FW#config vdom
FW(vdom)#edit TEST_vdom
FW(TEST_vdom)#config firewall service custom
FW(custom)#edit Test_Port_8999
FW(Test_Port_8999)#set category Gengeral
FW(Test_Port_8999)#set tcp-portrange 8999
FW#end

 

반응형

# set 옵션
- proxy : Enable/disable web proxy service
- category : Service category
- protocol : Protocol type based on IANA numbers
- iprange : Start and end of the IP range associated with service
- fqdn : Fully qualified domain name
- tcp-portrange : Multiple TCP port ranges
- udp-portrange : Multiple UCP port ranges
- sctp-portrange : Multiple SCTP port ranges
- tcp-halfclose-timer : Wait time to close a TCP session waiting for an unanswered FIN packet( 1-86400 sec , 0 = default)
- tcp-halfopen-timer : Wait time to close a TCP session waiting for an unanswered open session packet( 1-86400 sec , 0 = default)
- tcp-timewait-timer : Set the length of the TCP TIME-WAIT state in seconds ( 1 - 300 sec, 0 = default)
- udp-idle-timer : UDP half close timeout ( 0 - 86400 sec, 0 = default )
- session-ttl : Session TTL ( 300 - 604800, 0 = default)
- check-rest-range : Configure the type of ICMP error message verifiation
- comment : comment
- color : Color of icon of the GUI
- visibility : Enable/disable the visibility of the service of the GUI

 

 

[Fortinet] Fortigate CLI Commands - Address(주소 객체) 생성

[Fortinet] Fortigate CLI Commands - Address(주소 객체) 생성