Fortinet/CLI: Unterschied zwischen den Versionen

Aus SchnallIchNet
Wechseln zu: Navigation, Suche
Zeile 44: Zeile 44:
 
end
 
end
 
</pre>
 
</pre>
 +
 +
 +
=== Packet Capture ===
 +
 +
diag sniffer packet "<interface-name|any>" "host <IP> and port 3389" 4
 +
 +
4 = verbose level (1-6)
 +
 +
[http://docs-legacy.fortinet.com/frec/admin_hlp/1-1-0/index.html#page/FortiRecorder_Help/packet_capture.html Fortinet-Docu]

Version vom 11. Januar 2017, 13:40 Uhr


Inhaltsverzeichnis

CLI

Policy

config firewall policy
    edit 81
        set srcintf "port1"
        set dstintf "wan1"
        set srcaddr "Netz1" "Netz 2" "Netz ..."
        set dstaddr "Netz - DST"
        set action ipsec
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set natip 10.x.y.0 255.255.255.0
        set comments "ACHTUNG NAT-Adresse via CLI hinzugefuegt"
        set outbound enable
        set natoutbound enable
        set vpntunnel "PH1NAME"
    next
end

config firewall policy
    edit 238
        set srcintf "port7"
        set dstintf "wan1"
        set srcaddr "NETZ SRC"
        set dstaddr "Netz DST"
        set action ipsec
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set natip 10.x.y.0 255.255.255.0
        set comments "Outbound NAT!  set natip 10.x.y.0 255.255.255.0"
        set inbound enable
        set outbound enable
        set natoutbound enable
        set vpntunnel "PH1NAME"
    next
end


Packet Capture

diag sniffer packet "<interface-name|any>" "host <IP> and port 3389" 4

4 = verbose level (1-6)

Fortinet-Docu