Fortinet FortiGate 100A, Administration Manual

Page: 200 / 374

200
01-28007-0068-20041203 Fortinet Inc.
Configuring addresses Firewall
An IP/Mask address can represent:
• The address of a subnet (for example, for a class C subnet,
IP address: 192.168.20.0 and Netmask: 255.255.255.0).
• A single IP address (for example, IP Address: 192.168.20.1 and
Netmask: 255.255.255.255)
• All possible IP addresses (represented by IP Address: 0.0.0.0 and Netmask:
0.0.0.0)
An IP address can be:
• The IP address of a single computer (for example, 192.45.46.45).
• The IP address of a subnetwork (for example, 192.168.1.0 for a class C subnet).
• 0.0.0.0 to represent all possible IP addresses
The netmask corresponds to the type of address that you are adding. For example:
• The netmask for the IP address of a single computer should be 255.255.255.255.
• The netmask for a class A subnet should be 255.0.0.0.
• The netmask for a class B subnet should be 255.255.0.0.
• The netmask for a class C subnet should be 255.255.255.0.
• The netmask for all addresses should be 0.0.0.0
An IP Range address represents:
• A range of IP addresses in a subnet (for example, 192.168.20.1 to 192.168.20.10)
Configuring addresses
To add an address
1 Go to Firewall > Address .
2 Select Create New.
3 Enter a name to identify the address.
4 Enter the IP address and netmask or the IP address range.
5 Select OK.
To edit an address
Edit an address to change its IP information. You cannot edit the address name.
1 Go to Firewall > Address > Address .
2 Select the Edit icon beside the address you want to edit.
3 Make any required changes.
Type Select the type of address. Each type reveals the corresponding fields to
configure.
IP Range/Subnet Enter the firewall IP address, forward slash, and subnet mask or enter an IP
address range separated by a hyphen
Note: IP address: 0.0.0.0 and Netmask: 255.255.255.255 is not a valid firewall address.