Creating a new TCP/UDP/SCTP service in the CLI

The following is the creation of the same service using the command line.

 

config firewall service custom edit Example.com_WebAdmin

set comment “Admin connection to Example.com Website” set category Web Access

set protocol TCP/UDP/SCTP

set tcp-portrange 4300 end

end

 

ICMP / ICMP6

8. For the Protocol Type field, choose ICMP or ICMP6 from the drop down menu

9. In the Type field enter the appropriate type number based on the information found in “ICMP Types and Codes” on page 1 or in “ICMPv6 Types and Codes” on page 1002, depending on whether the Protocol Type is ICMP or ICMPv6

10. In the Code field enter the appropriate code number for the type, if applicable, based on the information found in “ICMP Types and Codes” on page 1 or in “ICMPv6 Types and Codes” on page 1002, depending on whether the Protocol Type is ICMP or ICMPv6

11. Select OK to confirm the configuration

 

 

Example

Example settings for an ICMP.service.In this case it has been set up for some special testing of ICMP packets.

Field                                                           Value

Name                                                          ICMP test #4

Comments                                                 For testing of proprietary network scanner

Field                                                           Value

Service Type                                              Firewall

Show in Service List                                 enabled

Category                                                    Network Services

Protocol Options

Protocol Type                                            ICMP

Type                                                           7

Code                                                          <left blank>

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!