Search Results

(2021-10-07) Problem Who's logged in from where? Solution # di firewall auth list

(2022-02-15) Problem I want a (or a bunch of) read-only admin(s) with global scope. Solution # config global # config system accprofile edit "admin_readonly" set admingrp read set authgrp read set endpoint-control-grp read s...

(2022-06-17) Problem SD-WAN no workie. Solution You can probably figure out information from some or all of these: # diag sys virtual-wan-link member # diag firewall proute list # diag sys virtual-wan-link health-check # diag sys virtual-wan-link service # dia...

(2020-01-11) Problem If you try to put an IP address on a VPN tunnel interface, the minimum netmask you can apply to that interface is /27. Solution hashtag-shruggie Commentary That's a lot of IP addresses to waste on a point-to-point link, especially one wher...

(2020-03-24) Problem What does this error code that FortiClient SSLVPN is giving me? Solution If FortiClient fails as the following stages, the likely cause is as follows: 10% – Local Network/PC issue 40% – Application or the Fortigate causing the error, occa...

(2024-02-08) Problem The local, internally generated certificate that the Fortigate presents for various things has expired. Solution # execute vpn certificate local generate default-ssl-key-certs Are you sure to re-generate the default RSA, DSA, ECDSA and Ed...

(2023-02-21) How many can I define? On the device in question: fgt300d-a # print tablesize system.vdom: 0 0 10 system.datasource: 0 0 0 system.accprofile: 0 0 18 system.npu:port-cpu-map: 0 256 512 system.np6: 0 256 512 [...] Output isn't greppable, unfortuna...

(2024-02-06) Problem CLI way to duplicate the "policy lookup" tool Solution diagnose firewall iprope lookup <src ip> <src port> <dst ip> <dst port> <protocol> <Incoming_interface> eg: # di fire iprope lookup 10.291.12.21 999 10.150.32.144 1433 tcp port1 (Sou...

(2023-11-15) Example Link Monitor Configuration config system link-monitor edit "VLAN601" set srcintf "VLAN601 set server "172.26.2.49" set gateway-ip 172.26.2.49 set source-ip 172.26.2.50 set interval 1000 set failtime 15 set recoverytime 15 next end Example...