飞塔常用命令

FortiGate飞塔防火墙显示相关配置实用命令 (2012-11-19 13:44:49)转载▼
标签： 全局 静态 接口 物理 逻辑 杂谈 分类： 防火墙/VPN/负载均衡
飞塔防火墙FortiGate的show 命令显示相关配置，而使用get命令显示实时状态

show Full-configuration显示当前完全配置

show system global 查看主机名，管理端口
显示结果如下
config system global
set admin-sport 10443
set admintimeout 480
set hostname "NEWCASE"
set language simch
set optimize antivirus
set sslvpn-sport 443
set timezone 55
end

show system interface 查看接口配置
显示结果如下
edit "internal"
set vdom "root"
set ip 192.168.253.1 255.255.255.200
set allowaccess ping https ssh snmp http telnet
set dns-query recursive
set type physical
next

get system inter physical查看物理接口状态，如果不加physical参数可以显示逻辑VPN接口的状态
==[port1]
mode: static
ip: 218.94.115.50 255.255.255.248
status: up
speed: 100Mbps Duplex: Full

==[port2]
mode: static
ip: 88.2.192.52 255.255.255.240
status: up
speed: 1000Mbps Duplex: Full

show router static 查看默认路由的配置
显示结果如下
config router static
edit 1
set device "wan1"
set gateway 27.151.120.X
next
end


get router info routing-table static
查看路由表中的静态路由
S* 0.0.0.0/0 [10/0] via 218.94.115.49, port1
S 66.72.0.0/16 [120/0] via 88.0.195.130, HuaiAn

show router ospf 查看ospf 的相关配置


show system dns 查看DNS的相关配置
显示结果如下
config system dns
set primary 208.91.112.53
set secondary 208.91.112.52
end


get router info routing-table all 显示全局路由表（相当于cisco的show ip routing）
VPN-FT3016# get router info routing-table all
Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP
O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default
S* 0.0.0.0/0 [10/0] via 218.94.115.49, port1
O 1.1.1.1/32 [110/2] via 88.2.192.50, port2, 07w2d23h
O 2.2.2.2/32 [110/2] via 88.2.192.81, port4, 07w2d23h
O E1 10.100.10.0/23 [110/22] via 88.2.192.50, port2, 07w2d23h
O E1 10.100.20.0/23 [110/22] via 88.2.192.50, port2, 07w2d23h
O E1 10.254.1.0/24 [110/21] via 88.2.192.50, port2, 07w2d23h
[110/21] via 88.2.192.81, port4, 07w2d23h
O E1 10.254.2.0/24 [110/21] via 88.2.192.50, port2, 07w2d23h
[110/21] via 88.2.192.81, port4, 07w2d23h
O 10.254.133.0/24 [110/2] via 88.2.192.50, port2, 07w2d23h
O E1 30.40.1.0/24 [110/21] via 88.2.192.50, port2, 07w2d23h
O E1 30.40.2.0/24 [110/21] via 88.2.192.50, port2, 07w2d23h
O 66.0.32.0/24 [110/2] via 88.2.192.50, port2, 07w2d23h
[110/

2] via 88.2.192.81, port4, 07w2d23h