config system global
Use this command to manage system settings.
Before you begin:
- You must have read-write permission for system settings.
Syntax
config system global
set admin-idle-timeout <integer>
set config-sync {enable|disable}
set default-certificate <certname>
set hardware-ssl {enable|disable}
set hostname <string>
set https-redirect {enable | disable}
set language {english|chinese-simplified}
set port-http <integer>
set port-https <integer>
set port-ssh <integer>
set port-telnet <integer>
set ssh-cbc-cipher {enable|disable|
set ssh-hmac-md5 {enable|disable}
set vdom-admin {enable|disable>
end
admin-idle-timeout |
Log out an idle administrator session. The default is 30 minutes. |
config-sync |
Enable/disable the configuration synchronization feature. This feature is related to the execute config-sync command, not HA synchronization. Disabled by default. |
default-certificate |
The default is Factory. |
hardware-ssl |
Enable/disable hardware SSL acceleration. The setting has no effect on FortiADC-VM. |
hostname |
You can configure a hostname to facilitate system management. If you use SNMP, for example, the SNMP system name is derived from the configured hostname. The hostname can be up to 35 characters in length. It can include US-ASCII letters, numbers, hyphens, and underscores, but not spaces and special characters. The System Information widget and the |
https-redirect |
Enable/disable HTTPS redirect. When enabled, all authentication cookies will have the secure flag set to “true” and all HTTP connections to ADC will be redirected to HTTPS. When disabled, secure flag will be set to “false” and both HTTPS and HTTP connections to ADC should work independently and as before. Default is enable. |
language |
English or Simplified Chinese. |
port-http |
Specify the port for the HTTP service. Usually, HTTP uses port 80. |
port-https |
Specify the port for the HTTPS service. Usually, HTTPS uses port 443. |
port-ssh |
Specify the port for the SSH service. Usually, SSH uses port 22. |
port-telnet |
Specify the port for the Telnet service. Usually, Telnet uses port 25. |
ssh-cbc-cipher |
Disabled by default. Enable if you want to use this cipher. |
ssh-hmac-md5 |
Disabled by default. Enable if you want to use this cipher. |
vdom-admin |
Enables the virtual domain feature. |
Example
FortiADC-VM # get system global default-certificate : Factory hostname : FortiADC-VM vdom-admin : disable admin-idle-timeout : 480 port-http : 80 port-https : 443 port-ssh : 22 port-telnet : 23 language : english hardware-ssl : enable gui-system : enable gui-router : enable gui-log : enable ssh-cbc-cipher : disable ssh-hmac-md5 : disable config-sync-enable : disable