useful commands-Fortinet Firewall

Monitoring commands:

show

• Show global or vdom config

sh system interface

• Equivalent to show run interface

diagnose hardware deviceinfo nic

• Equivalent to show interface

get system status

• show version information

sh firewall policy 6

• show firewall rule numer 6

sh router policy

• Show Policy Routing rules

diagnose system session list

• Show the excisting translations

diagnose system session clear

• Clears all xlate/translations

diagnose ip arp list

• Shows the arp table of connected hosts

get router info routing-table all

• Equivalent to ‘show ip route’

diagnose system top

• Show System Processes running with PIDs

diagnose system kill 9 <id>

• Kill the specific PID

diag test auth ldap <server_name> <username> <password>

• Ldap test query from the Forti to the AD

Useful Commands

1. IP addresses

#diag ip address list

Displays all IP addresses assigned to interfaces including VIPs and IP pools.

2. ARP table

#diag ip arp list

Display the FortiGate unit ARP cache.

3. Routing table

#diag ip route list

Display the current routing table in the kernel. All routing decisions depend on this

table. The kernel routing table is updated dynamically as the routing configuration or

dynamic routing changes.

4. Resources usage

#diag sys top 1 100

 From left to right, the columns are:

process name

process id

CPU usage

memory usage

#diag sys kill signal_number process_id

As signal_number you can use for example:

9 as SIGKILL

15 as SIGTERM

5. PPPoE interface

#diag debug en

#diag debug app ppp 3

This debug is useful for the F60DSL models

6. Interface status

#diag hard dev nic portName

 Thanks

R.karthikeyan