FortiOS 5.6.3 with 200D 雜記

# 允許 policy 中指定 [多個介面] 或 [any]
config system settings
set gui-multiple-interface-policy [disable | enable]
end
#將 Traffice Shaper 套用到 Policy
config firewall policy
    edit 6
        set traffic-shaper "traffice shaper name"
        set traffic-shaper-reverse "traffice shaper name"
    next
end
# SD-WAN 使用 IP Pools,須將 IP Pools 綁定 WAN 埠
config firewall ippool
    edit "IP Pool Name"
        set startip xxx.xxx.xxx.xxx
        set endip xxx.xxx.xxx.xxx
        set associated-interface "port1"
    next
end

留言