Kernaali Tools
Home / Configuration & sysadmin / FortiGate Address Object Generator
Configuration & sysadmin

FortiGate Address Object Generator

Generate a reviewed IPv4 subnet object snippet for the FortiOS CLI.

Local calculation · inputs are not sent to a server.

Result

Calculating the example…

How it works

The generator normalizes an IPv4 CIDR into its network and dotted mask, then emits config firewall address with type ipmask. Names use a restricted ASCII character set to avoid quoting and command-injection ambiguity.

Worked example

Name branch-lan and 10.42.20.7/24 produce an object for 10.42.20.0 with mask 255.255.255.0. The host portion is intentionally removed.

Inputs, edge cases & common mistakes

Based on the FortiOS 7.6 documentation family. Review against your exact installed release. Back up configuration and choose a new name: edit reopens an existing object and may change policy behavior. Apply in the intended VDOM. IPv6, FQDN and range objects are outside this tool. Kernaali is not affiliated with Fortinet.

Technical references

Reviewed 9 September 2026. Found an issue? Send a correction with a reproducible example.