CLI For FortiGate Firewall|info@networkjourney.

com | +91 9739521088

Cheatsheet Guide

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 1 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

Enable-Based (Privileged Exec Mode)

Privilege
sr.no CLI Command Mode Description
1 enable Enter privileged exec mode

2 configure terminal Enter global configuration mode

Display the currently running

3 show running-config
configuration

Save the running configuration to the

4 write memory
startup config

5 reload Reload the system

6 show interfaces Display information about interfaces

Return to user exec mode from

7 disable
privileged exec mode
8 clear counters Clear interface counters

9 show access-lists Display configured access control lists

show crypto isakmp Display IKE (Internet Key Exchange)

10
sa security associations
Enable Display IPSec (IP Security) security
11 show crypto ipsec sa
associations

12 show log Display system log messages

13 show firewall Display firewall configuration and status

copy running-config Save the running configuration to the

14
startup-config startup configuration

show interfaces
15 Display descriptions of all interfaces
description

show ip nat Display active Network Address

16
translations Translation (NAT) translations

17 debug ip packet Enable debugging of IP packets

show crypto key

18 Display the RSA public key information
mypubkey rsa

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 2 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

19 show cpu Display CPU utilization and statistics

clear crypto isakmp Clear existing IKE (Internet Key

20
sa Exchange) security associations

Clear existing IPSec (IP Security) security

21 clear crypto ipsec sa
associations

Display hardware and software version

22 show version
information

clear interface
23 Reset statistics for a specific interface
<interface>

24 show failover Display failover configuration and status

show threat-
25 Display statistics for threat detection
detection statistics

clear threat-detection
26 Clear threat detection statistics
statistics

27 `show running-config Enable

28 clear xlate Clear dynamic translation slots

Display information about active

29 show conn
connections

30 write erase Erase the startup configuration

31 show route Display the routing table

clear route Remove a specific route from the
32
<ip_address> routing table

show crypto engine Display active crypto engine

33
connections active connections

clear crypto engine

34 connections Clear specific crypto engine connections
<engine_id>

35 show failover history Display the failover event history

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 3 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

show firewall policy-

36 Display configured firewall policy maps
map

37 show ip dhcp pool Display DHCP pool information

Display the contents of the logging

38 show logging buffer
buffer

39 clear logging Clear the contents of the logging buffer

show access-list
40 Display a specific access control list
<name>

41 show platform Display platform information

42 clear platform Clear platform-specific information

show firewall Display detailed information about

43
sessiondb firewall sessions
clear firewall
44 Clear the firewall session database
sessiondb

45 show crypto map Display configured crypto maps

clear crypto map

46 Remove a specific crypto map
<name>

47 show failover state Display the state of failover

clear counters Clear interface counters for a specific

48
<interface> interface

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 4 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

User Exec (Privilege Level 1)

sr.no CLI Command Privilege Mode Description

Send ICMP Echo requests to a specified IP
1 ping <ip_address>
address

show interfaces
2 Display brief information about interfaces
brief

traceroute Trace the route to a destination IP

3
<destination> address
4 show ip route Display the IP routing table
Display system information and firmware
5 show version
version
Display detailed information about IP
6 show ip interface
interfaces
telnet
7 Initiate a Telnet session to a remote host
<hostname>
Display information about users currently
8 show users
logged in

clear line
9 Clear a specific terminal line
<line_number>

Display the Address Resolution Protocol

10 show arp
(ARP) table

Send ICMP Echo requests to a specified

11 ping <hostname>
hostname
12 show vlan Display VLAN information
traceroute
13 Trace the route to a specified hostname
<hostname>

14 show clock Display the current system time

show running-
Display the configuration of a specific
15 config interface
interface
<interface>

show tech- Generate a technical support information

16
support file

17 show logging Display the contents of the logging buffer

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 5 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

telnet Initiate a Telnet session to a specified IP

18
<ip_address> address
show ip interface Display brief information about IP
19
brief interfaces
show firewall
20 Display active firewall sessions
sessions

21 show vlan brief Display brief information about VLANs

22 `show version User Exec

show crypto Display ISAKMP (Internet Key Exchange)
23
isakmp policy policies

show crypto ipsec

24 Display configured IPSec transform sets
transform-set

Display detailed information about the

25 show clock detail
system clock
show access-list
26 Display a specific access control list
<number>
show ip nat
27 Display NAT statistics
statistics

Display technical information about the

28 show tech
system

29 show memory Display memory usage information

30 `show version User Exec

show interfaces
31 Display interface counters
counters

show ip dhcp Display DHCP (Dynamic Host

32
binding Configuration Protocol) bindings

show clock
33 Display the configured time zone
timezone
show ip route
34 Display the route to a specific network
<network>

show ip interface Display detailed information about an

35
<interface> interface

show running-
Display the configuration of a specific
36 config interface
interface
<interface>

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 6 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

show startup- Display the contents of the startup

37
config configuration
traceroute
38 Trace the route to a specified IP address
<ip_address>

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 7 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

Global Configuration Mode

Privilege
sr.no CLI Command Mode Description
1 interface <interface> Enter interface configuration mode

ip address
2 Assign an IP address to an interface
<ip_address>

3 access-list <number> Create or modify an IP access list

4 route-map <name> Create or modify a route map

5 crypto map <name> Create or modify a crypto map for VPN

6 hostname <hostname> Set the system's network name

banner motd Set a message-of-the-day (MOTD)

7
<message> banner
ntp server Configure Network Time Protocol (NTP)
8
<ip_address> server

snmp-server
9 community Set SNMP community string
<community_string> Global Config

Configure remote syslog server for

10 logging <ip_address>
logging

interface Vlan Enter VLAN interface configuration

11
<vlan_number> mode

ip route
12 <destination_network> Add a static IP route
<mask> <next-hop>

access-list <number>
13 permit/deny Add or modify an access control list rule
<protocol>

banner login Set a banner for login authentication

14
<message> messages
ntp server Configure NTP server for time
15
<ip_address> synchronization

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 8 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

crypto isakmp key

16 Configure a pre-shared key for IKE
<key> address <peer>

crypto ipsec transform-

17 set <name> esp- Configure IPSec transform set
<encryption_algo>

crypto map <name>

18 <seq_num> ipsec- Create a crypto map for IPSec
isakmp

interface Loopback
19 Create a loopback interface
<number>

ip access-group Apply an access list to an interface

20
<access_list> in/out inbound or outbound

ip nat inside source

21 static <local_ip> Configure static NAT translation
<global_ip>

ip nat pool <name>

22 <start_ip> <end_ip> Create a NAT pool
netmask <mask>

interface Vlan Enter VLAN interface configuration

23
<vlan_number> mode

ip access-list
Create an extended or standard access
24 <extended/standard>
control list
<name>

25 no shutdown Enable a previously disabled interface

ip route 0.0.0.0 0.0.0.0

26 Configure a default route
<next-hop>

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 9 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

ip nat outside source

27 list <acl_number> Configure dynamic NAT using an ACL
interface <interface>

Create a policy map for use in QoS

28 policy-map <name>
configuration
Create a traffic class for use in QoS
29 class <name>
configuration

service-policy <type> Apply a policy map to an interface or

30
<name> VLAN

interface range <type> Enter interface configuration mode for

31
<range> a range of interfaces

32 hostname <hostname> Set the device hostname

Configure parameters for virtual

33 line vty 0 15
terminal lines

ip dhcp excluded-
Exclude a range of IP addresses from
34 address <start_ip>
DHCP pool
<end_ip>

35 ip dhcp pool <name> Enter DHCP pool configuration mode

service password-
36 Enable password encryption
encryption

logging host Configure a remote syslog server for

37
<ip_address> logging

ip nat inside source list

38 <acl_number> Configure dynamic NAT using an ACL
interface <interface>

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 10 | 11

 CLI For FortiGate Firewall|info@networkjourney.com | +91 9739521088

ip nat inside source

static tcp <local_ip>
39 <local_port> interface Configure static NAT for TCP
<interface>
<external_port>

interface <interface>
40 Enter subinterface configuration mode
<subinterface>

ip dhcp relay
41 Enable DHCP relay information option
information option

ip dhcp pool
42 Enter DHCP pool configuration mode
<pool_name>

no service password-
43 Disable password recovery mechanism
recovery

CLI For Fortigate Firewall| info@networkjourney.com | +91 9739521088 || P a g e 11 | 11