Fortinet FortiGate 4000 Betriebsanweisung

Go to Router > Router Objects > Access List.

Select Create New.

Enter a name for the access list.

Select OK.

Go to Router > Router Objects > Access List.

Select the Add access-list entry icon to add a new access list entry or select the edit 
icon beside an existing access list entry to edit that entry.

Select Permit or Deny for the Action to take for the prefix in this access list entry.

Select either Match any or Match a network address.

If you selected Match a network address, enter the IP address and netmask that 
define the prefix for this access list entry.

Select Exact match if required.

Select OK.

A prefix list is an enhanced version of an access list that allows you to control the 
length of the prefix netmask.

Each rule in a prefix list consists of a prefix (IP address and netmask), the action to 
take for this prefix (permit or deny), and maximum and minimum prefix length settings. 

The access list name and the number of this entry.

Set the action to take for this prefix to Permit or Deny.

Select Match any to match any prefix. Select Match a network address 

and enter the prefix (IP address and netmask) for this access list rule.

By default, access list rules are matched on the prefix or any more 

specific prefix. Enable Exact match to match only the configured prefix.