Fortinet Version 3.0 - Manual (Page 59)

config CLI commands system admin
FortiBridge Version 3.0 Administration Guide
09-30000-0163-20061109
59
system admin
Use this command to add, edit, and delete administrator accounts.
Use the admin account or an account with system configuration read and write privileges to add new
administrator accounts and control their permission levels. Each administrator account must include
an access profile. You cannot delete the admin administrator account. You cannot change the admin
administrator account permissions.
Command syntax pattern
config system admin
edit <name_str>
set <keyword> <variable>
end
config system admin
edit <name_str>
unset <keyword>
end
config system admin
delete <name_str>
end
get system admin [<name_str>]
show system admin [<name_str>]
Keywords and variables Description Default
accprofile
<profile-name_str>
Enter the name of the access profile to assign to this administrator
account. Access profiles control administrator access to FortiBridge
features. No
default.
password <password_str> Enter a password for the administrator account. For improved
security, the password should be at least 6 characters long. No
default.
trusthost1
<address_ipv4mask>
An IP address or subnet address and netmask from which the
administrator can connect to the FortiBridge unit.
If you want the administrator to be able to access the FortiBridge unit
from any address, set one of the trusted hosts to 0.0.0.0 and the
netmask to 0.0.0.0. 0.0.0.0/
0.0.0.0
trusthost2
<address_ipv4mask>
An IP address or subnet address and netmask from which the
administrator can connect to the FortiBridge unit.
If you want the administrator to be able to access the FortiBridge unit
from any address, set one of the trusted hosts to 0.0.0.0 and the
netmask to 0.0.0.0. 0.0.0.0/
0.0.0.0
trusthost3
<address_ipv4mask>
An IP address or subnet address and netmask from which the
administrator can connect to the FortiBridge unit.
If you want the administrator to be able to access the FortiBridge unit
from any address, set one of the trusted hosts to 0.0.0.0 and the
netmask to 0.0.0.0. 0.0.0.0/
0.0.0.0