config system global

Use this command to manage system settings.

Before you begin:

• You must have read-write permission for system settings.

Syntax

config system global

set admin-idle-timeout <integer>

set config-sync {enable|disable}

set default-certificate <certname>

set hardware-ssl {enable|disable}

set hostname <string>

set language {english|chinese-simplified}

set port-http <integer>

set port-https <integer>

set port-ssh <integer>

set port-telnet <integer>

set share-ip-address {enable|disable}

set ssh-cbc-cipher {enable|disable}

set ssh-hmac-md5 {enable|disable}

set vdom-admin {enable|disable}

set pre-login-banner {enable|disable}

end

admin-idle-timeout	Log out an idle administrator session. The default is 30 minutes.
config-sync	Enable/disable the configuration synchronization feature. This feature is related to the execute config-sync command, not HA synchronization. Disabled by default.
default-certificate	The default is Factory.
hardware-ssl	Enable/disable hardware SSL acceleration. The setting has no effect on FortiADC-VM.
hostname	You can configure a hostname to facilitate system management. If you use SNMP, for example, the SNMP system name is derived from the configured hostname. The hostname can be up to 35 characters in length. It can include US-ASCII letters, numbers, hyphens, and underscores, but not spaces and special characters. The System Information widget and the get system status CLI command display the full hostname. If the hostname is longer than 16 characters, the name is truncated and ends with a tilde ( ~ ) to indicate that additional characters exist, but are not displayed.
language	English or Simplified Chinese.
port-http	Specify the port for the HTTP service. Usually, HTTP uses port 80.
port-https	Specify the port for the HTTPS service. Usually, HTTPS uses port 443.
port-ssh	Specify the port for the SSH service. Usually, SSH uses port 22.
port-telnet	Specify the port for the Telnet service. Usually, Telnet uses port 25.
share-ip-address	Enable this option to share NAT IP pools/addresses between L4 and L7 virtual servers.
ssh-cbc-cipher	Disabled by default. Enable if you want to use this cipher.
ssh-hmac-md5	Disabled by default. Enable if you want to use this cipher.
vdom-admin	Enables the virtual domain feature.
pre-login-banner	Enables the pre-login banner feature.

Example

FortiADC-VM # get system global
				default-certificate           : Factory
				hostname                      : FortiADC-VM
				vdom-admin                    : disable
				admin-idle-timeout            : 480
				port-http                     : 80
				port-https                    : 443
				port-ssh                      : 22
				port-telnet                   : 23
				language                      : english
				hardware-ssl                  : enable
				gui-system                    : enable
				gui-router                    : enable
				gui-log                       : enable
				ssh-cbc-cipher                : disable
				ssh-hmac-md5                  : disable
				config-sync-enable            : disable
				pre-login-banner              : enable