Categoria: Fortinet

LISTAR SEÇÕES FORTIGATE

diag sys session full-stat

diagnose sys session filter src IP_DE_ORIGEM

diagnose sys session filter dintf INTERFACE_DESTINO

diag sys session list

Outro exemplo

diagnose debug flow filter addr 10.254.16.1

diagnose debug flow show console enable

diagnose debug flow show function-name enable

diagnose debug console timestamp enable

diagnose debug flow trace start 50

diagnose debug enable

COMPARATIVO DE COMANDOS (vários fabricantes)

Comparativos de comandos Cisco, Brocade, Juniper, Fortigate e Palo Alto

Download da tabela

CiscoBrocadeJuniperFortigatePalo Alto
show versionshow versionshow versionget system status
configure terminalconfigure terminalconfigure ou editn/a
copy running-config startup-configwrite memorycommit and-quitn/a
reload at reload after request system reboot at yymmddhhmmn/a
ip route 10.10.10.0 255.255.255.0 192.168.1.1 metric 10ip route 10.10.10.0/24 192.168.1.1 metric 10set routing-options static route 192.168.47.0/24 next-hop 172.16.1.2configure routing static
edit x
set gateway 172.100.20.5
set distance 10
set device port2
set dst 10.10.10.0/24
end
end
show vlanshow vlan brief ethernet x/yshow vlansshow system interfaces ou get system interfaces
show process cpushow process cpushow system processes extensivediagnose top-summary
dirshow flashshow system storagediag system flash list
show versionshow version
uptime		show system uptimeget system status
show version ou show diagshow versionshow chassis forwardingget system status
show environmentshow environment power
show environment sensor
show system monitor
Show switch status		show chassis environmentexecute sensor list ou execute sensor detail
show version ou show diagshow environment power
show environment sensor
show system monitor		show chassis hardwareget system status
show memory summaryshow system monitorshow chassis routing-enginediagnose top-summary
reloadreload after request system rebootexecute reload
show ntp associationsshow ntp associationsshow ntp associationsdiag sys ntp status
show ntp statusshow ntp statusshow ntp statusdiag sys ntp status
show loggingshow loggingshow log ou
show system alarms ou
Show log messages		diag sniff pack any 'host 10.10.10.1' 4 ou
diag sniff pack any 'port 3389' 4 ou
diag sniff pack any 'host 10.10.10.1 and port 445' 4
show usersshow usersshow system usersget system logged-users
show protocolssh int briefshow system connectionsdiagnose sys session list
diagnose sys session filter
show tcpshow system connectionsdiagnose sys session list
diagnose sys session filter
clear line xkilltelnetrequest system logout usernameget sys info admin status
execute disconnect-admin-session x
terminal length 0Skip-page-display | no-moren/a
Interface fa01
shutdown		interface ethernet 1/1/8
shutdown		interface fa0/0
disable		configure system interface
edit x
set status disable
end
end
dorunn/a
show running-configurationshow config ou
show run		show configurationshow full-configuration
show policy-mapshow class-of-serviceconfig router policy
show
interface f0/1interface ethernet 1/1/8interface fa0/0configure system interface
show ip interfaces ou show interfaceshow interfacesshow interfacesshow system interfaces ou
get system interfaces ou
diag netlink interface list
show interface port-channelshow interfaces lagshow lacp interfaces ou show interface ae0show system interfaces ou
get system interfaces ou
diag netlink aggregate name your_aggregate_link
show ip interfaces briefshow interfaces terseshow system interfaces ou
get system interfaces ou
diag netlink interface list
show policy-map interfaceshow traffic-policyshow class-of-service interface
sh ip routeshow routeget router info routing-table all
show ip route summaryshow route summaryget router info routing-table all
show ip routeshow route forwarding-tableget router info routing-table all
show ip route 10.0.0.0show route 10.0.0.0/8 detailget route info rout detail 10.0.0.0
clear countersclear interfaces statistics alldiag netlink interface clear x
show techsupportrequest support informationdiag debug report
show interfaceshow statistics ethernetdiagnose hardware deviceinfo nic
show arpshow mac-address-tableshow ethernet-switching table brief ou show bridge mac-tableget system arp ou diagnose ip arp list
show ip nat translationdiagnose system session list
clear ip nat translationdiagnose system session clear
n/acommit check n/a
n/acommit at “2017-09-15 23:59”n/a
copy running-config startup-configcommit confirmed 1n/a
copy running-config startup-configcommit and-quitn/a
ping 10.10.10.1ping 10.10.10.1exec ping 10.10.10.2
ping 10.10.10.1 count 100ping 10.10.10.1 rapid count 100 10.10.10.1exec ping-options repeat-count 100
traceroute 10.10.10.1traceroute 10.10.10.1exec traceroute 10.10.10.1
show clockshow clockget system status
show route-mapshow traffic-policyshow policy
undebug allundebugundebug alldiagnose debug disable
diagnose debug flow trace stop
diagnose debug flow filter clear
diagnose debug reset
show stack
show stack connection
show stack detail
show stack failover
show stack link-sync status
show stack neighbors
show statistics brief management 1
show statistics management 1
show statistics stack-ports
show stp-bpdu-guard
diagnose vpn ike log-filter src-addr4 186.206.11.252
diagnose debug application ike -1
diagnose debug enable


diagnose debug disable
diagnose vpn ike log-filter clear