[PDF] FortiGate CLI Reference 31 thg 8 2016 Managing

View - Download FortiGate CLI Reference

Previous PDF

Next PDF

FortiOS™

CLI Reference for FortiOS 5.0

FortiOS™ CLI Reference for FortiOS 5.0

August 31, 2016

01-509-99686-20160831

Copyright© 2016 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and

FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet"s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet"s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

Technical Documentationdocs.fortinet.com

Knowledge Basekb.fortinet.com

Customer Service & Supportsupport.fortinet.com

Training Servicestraining.fortinet.com

FortiGuardfortiguard.com

Document Feedbacktechdocs@fortinet.com

Page 3

Contents

Introduction..................................................................................................... 19

How this guide is organized............................................................................. 19

Availability of commands and options............................................................. 19 Managing Firmware with the FortiGate BIOS.............................................. 20

Accessing the BIOS............................................................................................... 20

Navigating the menu........................................................................................ 20

Loading firmware................................................................................................... 21

Configuring TFTP parameters.......................................................................... 21

Initiating TFTP firmware transfer...................................................................... 22

Booting the backup firmware ................................................................................ 22

What"s new...................................................................................................... 23

alertemail......................................................................................................... 55

setting.................................................................................................................... 56

antivirus........................................................................................................... 60

heuristic ................................................................................................................. 61

mms-checksum..................................................................................................... 62

notification ............................................................................................................. 63

profile..................................................................................................................... 64

config {http | https | ftp | ftps | imap | imaps | mapi | pop3 | pop3s | smb | smtp |

smtps | nntp | im}........................................................................................... 65

config nac-quar................................................................................................ 66

quarantine.............................................................................................................. 67

service.................................................................................................................... 70

settings .................................................................................................................. 71

application....................................................................................................... 72

custom................................................................................................................... 73

list .......................................................................................................................... 74

name...................................................................................................................... 78

client-reputation............................................................................................. 79

profile..................................................................................................................... 80

dlp.................................................................................................................... 82

filepattern............................................................................................................... 83

fp-doc-source........................................................................................................ 85

fp-sensitivity........................................................................................................... 87

sensor.................................................................................................................... 88

settings .................................................................................................................. 90

Fortinet Technologies Inc. Page 4 FortiOS™ - CLI Reference for FortiOS 5.0

endpoint-control............................................................................................. 91

forticlient-registration-sync.................................................................................... 92

profile..................................................................................................................... 93

settings .................................................................................................................. 98

firewall............................................................................................................. 99

address, address6............................................................................................... 100

addrgrp, addrgrp6 ............................................................................................... 103

auth-portal ........................................................................................................... 104

carrier-endpoint-bwl............................................................................................ 105

carrier-endpoint-ip-filter....................................................................................... 107

central-nat............................................................................................................ 108

deep-inspection-options ..................................................................................... 109

config ftps...................................................................................................... 110

config https.................................................................................................... 111

config imaps .................................................................................................. 111

config pop3s.................................................................................................. 112

config smtps .................................................................................................. 112

config ssl........................................................................................................ 113

config ssl-server............................................................................................. 113

dnstranslation ...................................................................................................... 115

DoS-policy, DoS-policy6..................................................................................... 116

gtp........................................................................................................................ 118

identity-based-route ............................................................................................ 134

interface-policy.................................................................................................... 135

interface-policy6.................................................................................................. 137

ipmacbinding setting ........................................................................................... 139

ipmacbinding table .............................................................................................. 140

ippool, ippool6..................................................................................................... 141

ip-translation........................................................................................................ 143

ipv6-eh-filter......................................................................................................... 144

ldb-monitor.......................................................................................................... 145

local-in-policy, local-in-policy6............................................................................ 147

mms-profile.......................................................................................................... 148

config dupe {mm1 | mm4}.............................................................................. 155

config flood {mm1 | mm4}.............................................................................. 157

config log ....................................................................................................... 158

config notification {alert-dupe-1 | alert-flood-1 | mm1 | mm3 | mm4 | mm7}. 158

config notif-msisdn........................................................................................ 162

multicast-address................................................................................................ 163

multicast-policy ................................................................................................... 165

policy, policy6...................................................................................................... 167

config identity-based-policy.......................................................................... 184

Fortinet Technologies Inc. Page 5 FortiOS™ - CLI Reference for FortiOS 5.0

policy46, policy64................................................................................................ 186

profile-group........................................................................................................ 188

profile-protocol-options....................................................................................... 190

config http...................................................................................................... 192

config ftp........................................................................................................ 193

config dns ...................................................................................................... 194

config imap .................................................................................................... 194

config mapi .................................................................................................... 195

config pop3.................................................................................................... 195

config smtp.................................................................................................... 196

config nntp..................................................................................................... 197

config im ........................................................................................................ 198

config mail-signature ..................................................................................... 198

schedule onetime................................................................................................. 199

schedule recurring............................................................................................... 200

schedule group.................................................................................................... 201

service category................................................................................................... 202

service custom..................................................................................................... 203

service group....................................................................................................... 207

shaper per-ip-shaper........................................................................................... 208

shaper traffic-shaper ........................................................................................... 210

sniffer................................................................................................................... 211

sniff-interface-policy............................................................................................ 214

sniff-interface-policy6.......................................................................................... 217

ssl setting............................................................................................................. 220

ttl-policy............................................................................................................... 221

vip ........................................................................................................................ 222

vip46 .................................................................................................................... 242

vip6 ...................................................................................................................... 244

vip64 .................................................................................................................... 246

vipgrp................................................................................................................... 248

vipgrp46............................................................................................................... 249

vipgrp64............................................................................................................... 250

ftp-proxy........................................................................................................ 251

explicit.................................................................................................................. 252

gui .................................................................................................................. 253

console ................................................................................................................ 254

icap ................................................................................................................ 255

profile................................................................................................................... 256

server................................................................................................................... 257

Fortinet Technologies Inc. Page 6 FortiOS™ - CLI Reference for FortiOS 5.0

imp2p............................................................................................................. 258

aim-user............................................................................................................... 259

icq-user................................................................................................................ 260

msn-user.............................................................................................................. 261

old-version........................................................................................................... 262

policy ................................................................................................................... 263

yahoo-user........................................................................................................... 264

ips .................................................................................................................. 265

custom................................................................................................................. 266

decoder................................................................................................................ 267

global................................................................................................................... 268

rule....................................................................................................................... 270

sensor.................................................................................................................. 271

setting.................................................................................................................. 276

log.................................................................................................................. 277

custom-field......................................................................................................... 278

{disk | fortianalyzer | fortianalyzer2 | fortianalyzer3 | memory | syslogd | syslogd2 |

syslogd3 | webtrends | fortiguard} filter............................................................. 279

disk setting........................................................................................................... 283

eventfilter ............................................................................................................. 287

{fortianalyzer | syslogd} override-filter ................................................................. 288

fortianalyzer override-setting............................................................................... 289

{fortianalyzer | fortianalyzer2 | fortianalyzer3} setting .......................................... 290

fortiguard setting.................................................................................................. 293

gui-display ........................................................................................................... 294

memory setting.................................................................................................... 295

memory global-setting......................................................................................... 296

setting.................................................................................................................. 297

syslogd override-setting...................................................................................... 299

{syslogd | syslogd2 | syslogd3} setting................................................................ 301

webtrends setting................................................................................................ 303

netscan.......................................................................................................... 304

assets................................................................................................................... 305

settings ................................................................................................................ 307

pbx ................................................................................................................. 309

dialplan ................................................................................................................ 310

did........................................................................................................................ 312

extension ............................................................................................................. 313

global................................................................................................................... 315

ringgrp.................................................................................................................. 317

Fortinet Technologies Inc. Page 7 FortiOS™ - CLI Reference for FortiOS 5.0

voice-menu.......................................................................................................... 318

sip-trunk............................................................................................................... 319

report............................................................................................................. 321

chart..................................................................................................................... 322

dataset................................................................................................................. 327

layout ................................................................................................................... 328

style...................................................................................................................... 333

summary.............................................................................................................. 337

theme................................................................................................................... 338

router............................................................................................................. 341

access-list, access-list6 ...................................................................................... 342

aspath-list............................................................................................................ 344

auth-path ............................................................................................................. 345

bfd........................................................................................................................ 346

bgp....................................................................................................................... 347

config router bgp ........................................................................................... 351

config admin-distance................................................................................... 354

config aggregate-address, config aggregate-address6................................ 355

config neighbor.............................................................................................. 356

config network, config network6 ................................................................... 365

config redistribute, config redistribute6......................................................... 366

community-list..................................................................................................... 367

gwdetect.............................................................................................................. 369

isis........................................................................................................................ 370

config isis-interface........................................................................................ 374

config isis-net................................................................................................. 375

config redistribute {bgp | connected | ospf | rip | static}................................ 375

config summary-address............................................................................... 376

key-chain ............................................................................................................. 377

multicast .............................................................................................................. 379

Sparse mode.................................................................................................. 379

Dense mode................................................................................................... 380

config router multicast................................................................................... 382

config interface .............................................................................................. 383

config pim-sm-global..................................................................................... 386

multicast6 ............................................................................................................ 391

multicast-flow ...................................................................................................... 392

ospf...................................................................................................................... 393

config router ospf........................................................................................... 396

config area..................................................................................................... 398

config distribute-list....................................................................................... 403

config neighbor.............................................................................................. 404

Fortinet Technologies Inc. Page 8 FortiOS™ - CLI Reference for FortiOS 5.0

config network ............................................................................................... 405

config ospf-interface...................................................................................... 405

config redistribute.......................................................................................... 409

config summary-address............................................................................... 410

ospf6.................................................................................................................... 411

policy, policy6...................................................................................................... 417

prefix-list, prefix-list6........................................................................................... 421

rip......................................................................................................................... 423

config router rip.............................................................................................. 424

config distance............................................................................................... 426

config distribute-list....................................................................................... 426

config interface .............................................................................................. 427

config neighbor.............................................................................................. 429

config network ............................................................................................... 430

config offset-list............................................................................................. 430

config redistribute.......................................................................................... 431

ripng..................................................................................................................... 432

config distance............................................................................................... 434

route-map............................................................................................................ 438

Using route maps with BGP .......................................................................... 440

setting.................................................................................................................. 445

static .................................................................................................................... 446

static6 .................................................................................................................. 448

spamfilter ...................................................................................................... 449

bwl ....................................................................................................................... 450

bword................................................................................................................... 453

dnsbl.................................................................................................................... 455

fortishield ............................................................................................................. 457

iptrust................................................................................................................... 459

mheader............................................................................................................... 460

options................................................................................................................. 462

profile................................................................................................................... 463

config {imap | imaps | mapi | pop3 | pop3s | smtp | smtps}........................... 465 config {gmail | msn-hotmail | yahoo-mail}...................................................... 466

switch-controller .......................................................................................... 467

managed-switch.................................................................................................. 468

vlan ...................................................................................................................... 469

system ........................................................................................................... 470

3g-modem custom .............................................................................................. 472

accprofile ............................................................................................................. 473

admin................................................................................................................... 476

amc...................................................................................................................... 485

Fortinet Technologies Inc. Page 9 FortiOS™ - CLI Reference for FortiOS 5.0

arp-table .............................................................................................................. 486

auto-install........................................................................................................... 487

autoupdate push-update..................................................................................... 488

autoupdate schedule........................................................................................... 489

autoupdate tunneling........................................................................................... 490

aux....................................................................................................................... 491

bug-report............................................................................................................ 492

bypass ................................................................................................................. 493

central-management............................................................................................ 494

console ................................................................................................................ 496

ddns..................................................................................................................... 497

dedicated-mgmt.................................................................................................. 499

dhcp reserved-address........................................................................................ 500

dhcp server.......................................................................................................... 501

dhcp6 server........................................................................................................ 506

dns....................................................................................................................... 508

dns-database....................................................................................................... 509

dns-server............................................................................................................ 512

elbc...................................................................................................................... 513

email-server......................................................................................................... 514

fips-cc.................................................................................................................. 515

fortiguard ............................................................................................................. 516

fortisandbox......................................................................................................... 520

geoip-override...................................................................................................... 521

gi-gk..................................................................................................................... 522

global................................................................................................................... 523

gre-tunnel............................................................................................................. 542

ha......................................................................................................................... 543

interface............................................................................................................... 555

ipip-tunnel............................................................................................................ 583

ips-urlfilter-dns..................................................................................................... 584

ipv6-neighbor-cache............................................................................................ 585

ipv6-tunnel........................................................................................................... 586

mac-address-table .............................................................................................. 587

modem................................................................................................................. 588

monitors............................................................................................................... 592

nat64.................................................................................................................... 594

network-visibility.................................................................................................. 595

np6....................................................................................................................... 596

npu....................................................................................................................... 600

Fortinet Technologies Inc. Page 10 FortiOS™ - CLI Reference for FortiOS 5.0

ntp........................................................................................................................ 601

object-tag ............................................................................................................ 602

password-policy .................................................................................................. 603

physical-switch.................................................................................................... 604

port-pair............................................................................................................... 605

probe-response ................................................................................................... 606

proxy-arp ............................................................................................................. 607

pstn...................................................................................................................... 608

replacemsg admin ............................................................................................... 610

replacemsg alertmail............................................................................................ 611

replacemsg auth.................................................................................................. 613

replacemsg device-detection-portal.................................................................... 617

replacemsg ec ..................................................................................................... 618

replacemsg fortiguard-wf .................................................................................... 620

replacemsg ftp..................................................................................................... 622

replacemsg http................................................................................................... 624

replacemsg im ..................................................................................................... 627

replacemsg mail................................................................................................... 629

replacemsg mm1................................................................................................. 632

replacemsg mm3................................................................................................. 635

replacemsg mm4................................................................................................. 637

replacemsg mm7................................................................................................. 639

replacemsg-group ............................................................................................... 642

replacemsg-group ............................................................................................... 644

replacemsg-image............................................................................................... 647

replacemsg nac-quar........................................................................................... 648

replacemsg nntp.................................................................................................. 650

replacemsg spam ................................................................................................ 652

replacemsg sslvpn............................................................................................... 655

replacemsg traffic-quota ..................................................................................... 656

replacemsg utm................................................................................................... 657

replacemsg webproxy ......................................................................................... 659

resource-limits..................................................................................................... 660

server-probe ........................................................................................................ 662

session-helper ..................................................................................................... 663

session-sync........................................................................................................ 665

session-ttl ............................................................................................................ 668

settings ................................................................................................................ 670

sit-tunnel.............................................................................................................. 677

sflow..................................................................................................................... 678

Fortinet Technologies Inc. Page 11 FortiOS™ - CLI Reference for FortiOS 5.0

sms-server........................................................................................................... 679

snmp community................................................................................................. 680

snmp sysinfo........................................................................................................ 684

snmp user............................................................................................................ 686

sp......................................................................................................................... 689

storage................................................................................................................. 691

stp........................................................................................................................ 692

switch-interface ................................................................................................... 693

tos-based-priority................................................................................................ 695

vdom-dns............................................................................................................. 696

vdom-link............................................................................................................. 697

vdom-property..................................................................................................... 698

vdom-radius-server ............................................................................................. 701

vdom-sflow.......................................................................................................... 702

virtual-switch........................................................................................................ 703

wccp .................................................................................................................... 704

zone ..................................................................................................................... 707

user................................................................................................................ 708

Configuring users for authentication.................................................................... 709

Configuring users for password authentication............................................. 709 Configuring peers for certificate authentication............................................. 709

ban....................................................................................................................... 710

device .................................................................................................................. 713

device-access-list................................................................................................ 714

device-category................................................................................................... 715

device-group........................................................................................................ 716

fortitoken.............................................................................................................. 717

fsso ...................................................................................................................... 718

fsso-polling.......................................................................................................... 720

group.................................................................................................................... 722

ldap...................................................................................................................... 726

local ..................................................................................................................... 729

password-policy .................................................................................................. 731

peer...................................................................................................................... 732

peergrp ................................................................................................................ 734

radius................................................................................................................... 735

setting.................................................................................................................. 740

tacacs+................................................................................................................ 742

voip ................................................................................................................ 743

profile................................................................................................................... 744

Fortinet Technologies Inc. Page 12 FortiOS™ - CLI Reference for FortiOS 5.0

config sip ....................................................................................................... 746

config sccp .................................................................................................... 755

vpn ................................................................................................................. 756

certificate ca ........................................................................................................ 757

certificate crl ........................................................................................................ 758

certificate local..................................................................................................... 760

certificate ocsp-server......................................................................................... 762

certificate remote................................................................................................. 763

certificate setting ................................................................................................. 764

ipsec concentrator............................................................................................... 765

ipsec forticlient..................................................................................................... 766

ipsec manualkey.................................................................................................. 767

ipsec manualkey-interface................................................................................... 770

ipsec phase1........................................................................................................ 773

ipsec phase1-interface ........................................................................................ 782

ipsec phase2........................................................................................................ 796

ipsec phase2-interface ........................................................................................ 803

l2tp....................................................................................................................... 812

pptp ..................................................................................................................... 814

ssl settings........................................................................................................... 816

ssl web host-check-software............................................................................... 820

ssl web portal....................................................................................................... 822

ssl web realm....................................................................................................... 831

ssl web user......................................................................................................... 832

ssl web virtual-desktop-app-list.......................................................................... 834

wanopt........................................................................................................... 835

auth-group........................................................................................................... 836

peer...................................................................................................................... 837

profile................................................................................................................... 838

settings ................................................................................................................ 842

ssl-server ............................................................................................................. 843

storage................................................................................................................. 846

webcache ............................................................................................................ 847

webfilter......................................................................................................... 850

content................................................................................................................. 851

content-header .................................................................................................... 853

quotesdbs_dbs14.pdfusesText_20

[PDF] fortigate 100d firmware upgrade

[PDF] fortigate 100d firmware version

[PDF] fortigate 100d flash memory

[PDF] fortigate 100d ipsec vpn configuration

[PDF] fortigate 100d ipsec vpn setup

[PDF] fortigate 100d manual book

[PDF] fortigate 100d memory upgrade

[PDF] fortigate 100d memory usage

[PDF] fortigate 100d ssl vpn limit

[PDF] fortigate 100d ssl vpn setup

[PDF] fortigate 100d user manual

[PDF] fortigate 100d user manual pdf

[PDF] fortigate 100d vpn client configuration

[PDF] fortigate 100e admin guide

[PDF] fortigate 100e configuration guide pdf