Fortinet FortiGate Series Administration Guide

Dynamic routing for IPv6 traffic What’s new in FortiOS Version 4.0 MR1
FortiGate Version 4.0 MR1 Administration Guide
60 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
config aggregate-address
Use this subcommand to configure aggregate address prefixes.
config distribute-list
Use this subcommand to filter incoming or outgoing updates using an access list or a
prefix list. If you do not specify an interface, the filter will be applied to all interfaces. You
must configure the access list or prefix list that you want the distribution list to use before
you configure the distribution list. For more information on configuring access lists and
prefix lists, see “router access-list6” on page 51 and “router prefix-list6” on page 56.
config interface
Use this subcommand to configure and enable split horizon.
A split horizon occurs when a router advertises a route it learns over the same interface it
learned it on. In this case the router that gave the learned route to the last router now has
two entries to get to another location. However, if the primary route fails that router tries
the second route to find itself as part of the route and an infinite loop is created. A
poisoned split horizon will still advertise the route on the interface it received it on, but it
will mark the route as unreachable. Any unreachable routes are automatically removed
from the routing table. This is also called split horizon with poison reverse.
Variable Description Default
edit <entry-id> Enter an entry number for the aggregate address list.
prefix6
<aggregate_prefix>
Enter the prefix for the aggregate address. ::/0
Note: The direction and listname keywords are required.
All other keywords are optional.
Variable Description Default
edit
<distribute_list_id>
Enter an entry number for the distribution list. The
number must be an integer.
No default.
direction {in | out} Set the direction for the filter. Enter in to filter incoming
packets. Enter out to filter outgoing packets.
out
interface <name_str> Enter the name of the interface to apply this distribution
list to. If you do not specify an interface, this distribution
list will be used for all interfaces.
Null.
listname
<listname_str>
Enter the name of the access list or prefix list to use for
this distribution list.
Null.
status
{enable | disable}
Enable or disable this distribution list. disable
Note: All keywords are optional.

Fortinet FortiGate Series Specifications

General

Model	FortiGate Series
Category	Firewall
Throughput	Varies by model
Interfaces	Varies by model
Concurrent Sessions	Varies by model
VPN Support	Yes
High Availability	Yes
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
IPS Throughput	Varies by model
NGFW Throughput	Varies by model
Threat Protection Throughput	Varies by model
New Sessions per Second	Varies by model
Power Supply	Varies by model
Security Features	Firewall, IPS, Application Control, Web Filtering, Antivirus, VPN
Virtual Domains	Yes
Form Factor	Desktop, Rackmount