Fortinet FortiLog-400 User Manual
Page 108
108
05-16000-0082-20050115
Fortinet Inc.
CLI commands
FortiLog CLI reference
Commands
Description
set system admin username
<name_str> password
<password_str> permission {readonly
| readwrite}
Enter system administrator user name, password, and access permission.
• <name_str> is the administrator user name.
• <password_str> is the password.
set system admin username
<name_str> trusthost <trusthost_str>
or <0.0.0.0> <netmask_str> or
<0.0.0.0>
Enter the administrator trusted host IP address and netmask. The trusted host IP
address is the location from which the administrator can log into the web-based
manager. If trusted host is 0.0.0.0 the administrator can log in from any IP address.
The trusted host netmask is the location from which the administrator can log into
the web-based manager. If netmask is 0.0.0.0 there is no restriction on the netmask.
• <trusthost_str> is trusted host IP address.
• <netmask_str> is the netmask.
set system admin username status
<enable | disable>
set system dns primary
{xxx.xxx.xxx.xxx | none}
Enter the primary DNS server IP address. Enter none to delete the primary DNS
server.
• <xxx.xxx.xxx.xxx> is the primary DNS server IP address.
set system dns secondary
{xxx.xxx.xxx.xxx | none}
Enter the secondary DNS server IP address. Enter none to delete the secondary
DNS server.
• <xxx.xxx.xxx.xxx> is the secondary DNS server IP address.
set system hostname <hostname_str> Enter the name for this FortiLog unit.
• <hostname_str> is the name of the FortiLog unit.
set system interface <nativist> config
allowaccess {ping | https | ssh | snap |
http | telnet}
Select the management access to the FortiLog unit interface (port1).
• <nativist> is system interface name.
set system interface <nativist> config
denatures {ping | https | ssh | snap |
http | telnet}
Select the management access that you want to deny to the FortiLog unit interface
(port1).
• <nativist> is system interface name.
set system interface <nativist> config
wins <xxx.xxx.xxx.xxx>
Enter the WINS server IP address.
• <xxx.xxx.xxx.xxx> is the WINS server IP address.
set system interface <nativist> config
matador {xx:xx:xx:xx:xx:xx | factory
default}
Set the mac address for this interface. You can also set it back to the factory default
value.
• <xx:xx:xx:xx:xx:xx> is the interface mac address.
set system interface <intf_str> config
log {enable | disable}
Enable or disable logging on traffic to the FortiLog unit from this interface.
set system interface <intf_str> config
mtu <mtu_integer>
Enter the maximum transportation unit for this interface. Enter “default” to cancel the
mtu.
• <mtu_integer> is the maximum transportation unit for this interface.
set system interface <intf_str> config
speed <speed_str>
Enter the transportation speed of this interface.
• <speed_str> is the speed type (auto, 10full, 10half, 100full, or 100half).
set system interface <intf_str> config
status {down | up}
Set the interface down or up.
set system interface <intf_str> config
secip <xxx.xxx.xxx.xxx>
Enter the secondary IP address of the interface.
• <xxx.xxx.xxx.xxx> is the secondary IP address of the interface.
set system interface <intf_str> config
secallowaccess {ping | https | ssh |
snmp | http | telnet}
Select management access to the port1 interface with a secondary IP.
set system interface <intf_str> config
secdenyaccess {ping | https | ssh |
snmp | http | telnet}
Select the management access with a secondary IP that you want to deny to the
port1 interface.