飞塔防火墙fortigate的show命令显示相关配置
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
飞塔防火墙fortigate的show命令显示相关配置，而使用get命令显示实时状态
show full-configuration显示当前完全配置
show system global 查看主机名，管理端口
显示结果如下
config system global
set admin-sport 10443
set admintimeout 480
set hostname "VPN-FT3016-02"
set language simch
set optimize antivirus
set sslvpn-sport 443
set timezone 55
end
show system interface 查看接口配置
显示结果如下
edit "internal"
set vdom "root"
set ip 88.140.194.4 255.255.255.240
set allowaccess ping https ssh snmp http telnet
set dns-query recursive
set type physical
next
get system inter physical查看物理接口状态，，如果不加physical参数可以显示逻辑vpn接口的状态
==[port1]
mode: static
ip: 218.94.115.50 255.255.255.248
status: up
speed: 100Mbps Duplex: Full
==[port2]
mode: static
ip: 88.2.192.52 255.255.255.240
status: up
speed: 1000Mbps Duplex: Full
show router static 查看默认路由的配置
显示结果如下
config router static
edit 1
set device "wan1"
set gateway 27.151.120.X
next
end
get router info routing-table static
查看路由表中的静态路由
S* 0.0.0.0/0 [10/0] via 218.94.115.49, port1
S 66.72.0.0/16 [120/0] via 88.0.195.130, HuaiAn
show router ospf 查看ospf 的相关配置
show system dns 查看dns的相关配置
显示结果如下
config system dns
set primary 208.91.112.53
set secondary 208.91.112.52
end
get router info routing-table all 显示全局路由表（相当于cisco的show ip routing）
VPN-FT3016# get router info routing-table all
Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP
O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default
S* 0.0.0.0/0 [10/0] via 218.94.115.49, port1
O 1.1.1.1/32 [110/2] via 88.2.192.50, port2, 07w2d23h
O 2.2.2.2/32 [110/2] via 88.2.192.81, port4, 07w2d23h
O E1 10.100.10.0/23 [110/22] via 88.2.192.50, port2, 07w2d23h
O E1 10.100.20.0/23 [110/22] via 88.2.192.50, port2, 07w2d23h
O E1 10.254.1.0/24 [110/21] via 88.2.192.50, port2, 07w2d23h
[110/21] via 88.2.192.81, port4, 07w2d23h
O E1 10.254.2.0/24 [110/21] via 88.2.192.50, port2, 07w2d23h
[110/21] via 88.2.192.81, port4, 07w2d23h
O 10.254.133.0/24 [110/2] via 88.2.192.50, port2, 07w2d23h
O E1 30.40.1.0/24 [110/21] via 88.2.192.50, port2, 07w2d23h
O E1 30.40.2.0/24 [110/21] via 88.2.192.50, port2, 07w2d23h
O 66.0.32.0/24 [110/2] via 88.2.192.50, port2, 07w2d23h
[110/2] via 88.2.192.81, port4, 07w2d23h
get router info ospf neighbor 查看ospf邻居建立关系（相当于cisco的show ip ospf nei）