Kernaali Tools
Home / Configuration & sysadmin / FortiGate Address Group Generator
Configuration & sysadmin

FortiGate Address Group Generator

Create an IPv4 address group snippet from existing object names.

Local calculation · inputs are not sent to a server.

Result

Calculating the example…

How it works

Each validated member is quoted separately in a set member command under config firewall addrgrp. Duplicate names are removed. The generator creates no member objects and does not contact a firewall.

Worked example

branch-networks with members branch-lan and branch-servers produces one group containing those two objects. Create the member objects first in the same VDOM.

Inputs, edge cases & common mistakes

set member replaces the member list of an existing group. Use a fresh name unless replacement is intended, inspect references and back up before applying. Self-membership is rejected, but indirect cycles and existence cannot be checked offline. Up to 256 names are accepted by this helper; device limits may differ.

Technical references

Reviewed 9 September 2026. Found an issue? Send a correction with a reproducible example.