March 2, 2023

fortigate allow special source wan1 ping

  1. 先新增source address & source address group.
  2. ssh login fortigate device (好像GUI看不到這個local-in-policy, 需要Command)
    config firewall local-in-policy
    edit 1
    set intf "wan1"
    set srcaddr "safemyip"
    set dstaddr "all"
    set action accept
    set service "PING"
    set schedule "always"
    next
    edit 2
    set intf "wan1"
    set srcaddr "all"
    set dstaddr "all"
    set service "PING"
    set schedule "always"
    next
    end