Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
| Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
|
fortigate [2025/11/17 19:40] jango |
fortigate [2026/10/19 16:31] (aktuell) jango |
||
|---|---|---|---|
| Zeile 82: | Zeile 82: | ||
| diagnose vpn ike stats | diagnose vpn ike stats | ||
| - | diagnose debug application ike -1 | + | # IKE Debug |
| + | diagnose vpn ike log filter name < | ||
| + | diagnose debug application ike 1 # oder -1 für verbose | ||
| + | diagnose debug enable | ||
| + | # Meldungen erscheinen interaktiv in der CLI | ||
| diagnose debug disable | diagnose debug disable | ||
| + | # Welche Filter sind an | ||
| + | diagnose vpn ike log filter | ||
| + | # Alle Filter löschen | ||
| + | diagnose vpn ike log filter clear | ||
| + | |||
| + | # Sniffer | ||
| diagnose sniffer packet any 'host 10.0.0.1 and host 10.0.0.2' | diagnose sniffer packet any 'host 10.0.0.1 and host 10.0.0.2' | ||
| diagnose sniffer packet any 'net 10.0.0.0/ | diagnose sniffer packet any 'net 10.0.0.0/ | ||
| Zeile 322: | Zeile 332: | ||
| show | grep " | show | grep " | ||
| </ | </ | ||
| + | |||
| + | =====VPN===== | ||
| + | |||
| + | ====Site to Sote==== | ||
| + | |||
| + | Debugging | ||
| + | |||
| + | < | ||
| + | get vpn ipsec tunnel summary | ||
| + | diagnose vpn ike gateway list | ||
| + | diagnose vpn tunnel list | ||
| + | |||
| + | # Full run | ||
| + | diagnose debug disable | ||
| + | diagnose debug reset | ||
| + | diagnose vpn ike log filter clear | ||
| + | diagnose vpn ike log filter rem-addr4 78.142.89.178 | ||
| + | diagnose vpn ike log filter list | ||
| + | diagnose debug application ike -1 | ||
| + | diagnose debug enable | ||
| + | </ | ||
| + | |||
| =====SD WAN===== | =====SD WAN===== | ||
| Zeile 468: | Zeile 500: | ||
| set allowaccess ping fgfm ssh http https | set allowaccess ping fgfm ssh http https | ||
| next | next | ||
| + | end | ||
| + | |||
| + | config system dns | ||
| + | set primary 192.168.0.1 | ||
| + | set secondary 8.8.8.8 | ||
| + | end | ||
| + | |||
| + | config router static | ||
| + | edit 1 | ||
| + | set gateway 192.168.0.1 | ||
| + | set device port1 | ||
| + | next | ||
| + | end | ||
| </ | </ | ||
| Zeile 481: | Zeile 526: | ||
| =====License===== | =====License===== | ||
| - | Internet access required | + | Internet access required, via Web interface die Forticloud anmeldedaten eingeben. Nur 1 mal pro Account möglich, Account ist aber kostenlos. Oder in der CLI: |
| < | < | ||
| exec vm-license-options account-id MyEmail@byom.de | exec vm-license-options account-id MyEmail@byom.de | ||