有意思的是,同样是show system interface命令,如果我们直接回车,就能看到接口配置。 从字面意思来看,接口port1确实配置的通过DHCP自动获取IP地址,并且允许ping、HTTPS、SSH和fgfm,虽然现在还不知道fgfm是什么,但是应该也是一种管理方式。所以现在的问题应该是解决DHCP获取不到IP地址的问题。 在虚拟机设置中,我们找到port...
4. 新建虚拟IP group,并关联虚拟IP config firewall vipgrp edit "Test" //创建组名 set uuid 31aa331c-637b-51ea-4b5f-35d239897836 //UUID 自动生成 set interface "any" //接口任意 set comments "Test_VIP_Group" //可选,描述 set member "3389" "69" //将之前创建的 3389和69加入到该组 ne...
FortiGate-VM64-KVM # show system interface port1 config system interface edit "port1" set vdom "root" set mode dhcp set allowaccess ping ssh http fgfm set type physical set snmp-index 1 next end 此处获取的地址为 192.168.0.106,通过浏览器打开http://192.168.0.106,输入账号密码进入飞塔管理界面。
1、配置接口地址:FortiGate # config system interface FortiGate (interface) # edit lan FortiGate (lan) # set ip 192.168.100.99/24 FortiGate (lan) # end 2、配置静态路由 FortiGate (static) # edit 1 FortiGate (1) # set device wan1 FortiGate (1) # set dst 10.0.0.0 255.0.0.0 ...
type : ipmask //默认类型为 ipmask subnet : 192.168.1.2 255.255.255.255 FGT60B3908616179 # config firewall address FGT60B3908616179 (address) # edit 192.168.1.2 FGT60B3908616179 (192.168.1.2) # set associated-interface wan1 FGT60B3908616179 (192.168.1.2) # set associated-interface ...
#show 查看配置文件 #diagnose 诊断命令 #execute 常用的工具命令,如ping treacert,执行某条命令。 #exit 退出 #end 保存退出 2.常用命令 1、配置接口地址 FortiGate # config system interface FortiGate (interface) # edit port1 FortiGate (port1) # set ip 192.168.8.99/24 ...
对策略,对象等进行配置 getget dynamic and system information.查看相关关对象的参数信息showshow configuration.查看配置文件diagnosediagnose facility.诊断命令executeexecute static commands.常用的工具命令,如 ping exitexit the cli.退出二、常用命令1、配置接口地址 :fortigate # config system interface fortigate (...
FortiGate # config system interface FortiGate (interface) # edit lan FortiGate (lan) # set ip 192.168.100.99/24 FortiGate (lan) # end 2、配置静态路由 FortiGate (static) # edit 1 FortiGate (1) # set device wan1 FortiGate (1) # set dst 10.0.0.0 255.0.0.0 FortiGate (1) # set gateway...
config system interface edit port1 set ipmac enable end 4. 如果你的DHCP在防火墙上面的话,需要在对应的DHCP服务池中将某个IP和MAC的对应关系保留。 Config system dhcp server后回车输入show回车,可以看到当前所有的DHCP池,找到对应的DHCP池后输入edit+ID,我们这里edit 1,然后输入以下命令可以为某个MAC保留对应...
FortiGate # config system interface FortiGate (interface) # edit lan FortiGate (lan) # set ip 192.168.100.99/24 FortiGate (lan) # end 2 、配置静态路由 FortiGate (static) # edit 1 FortiGate (1) # set device wan1 FortiGate (1) # set dst 10.0.0.0 255.0.0.0 FortiGate (1) # set gateway...