Tools
This section describes the following troubleshooting tools:
execute commands
You can use the command-line interface (CLI) execute commands to run diagnostic utilities, such as nslookup, ping, and traceroute.
|
Execute Commands |
Description |
|---|---|
|
|
Backup:
to a tftp server |
|
|
Backup FortiDDoS information to external USB disk |
|
|
Enable or Disable internal bypass data traffic |
|
|
Find and correct errors on the log disk |
|
|
Cleanup database transaction log files |
|
|
Set system date and time |
|
|
Domain-blocklist related operations such as upload/download domain-blocklist file, append/delete/search/merge domain-blocklist, and reset |
|
|
Reset system to factory default |
|
|
Format external USB disk |
|
|
Format log disk to enhance performance Note: |
|
|
Update fortiguard-database |
|
|
SPP generate traffic statistics |
|
|
Reset global RRDs in case of Interface and other global related chart mismatch |
|
|
IPv4-blocklist related operations such as upload/download IPv4-blocklist file, append/delete/search/merge IPv4-blocklist, and reset |
|
|
Mount external USB disk |
|
|
Test DNS server to obtain domain name or IP address mapping |
|
|
Generate backend password |
|
|
Send ICMP ECHO_REQUEST to network hosts with IPv4 address: ping <host name | host ipv4> |
|
|
ping option settings |
|
|
Send ICMP6_ECHO_REQUEST to network hosts with IPv6 address: ping6 <host ipv6> |
|
|
ping6 option settings |
|
|
Reboot the system |
|
|
Reload appliance |
|
|
Repair database tables |
|
|
Clear/delete:
|
|
|
Restore image or configuration from tftp or ftp server |
|
|
Restore from external USB disk |
|
|
Reset all global and SPP RRDs |
|
|
Shutdown appliance |
|
|
Reset the threshold configuration and clear traffic history for an SPP |
|
|
Reset RRDs of a specific SPP in case of SPP related chart mismatch |
|
|
Simple telnet client |
|
|
Test if we can telnet to a server |
|
|
SPP emergency setup thresholds to adjust only certain key thresholds based on empirical knowledge |
|
|
Reset the threshold configuration for an SPP |
|
|
Display possible routes (paths) to destination host |
|
|
Unmount external USB disk |
|
|
Upload license file from tftp server only for VM |
diagnose commands
You can use the CLI diagnose commands to gather diagnostic information that can be useful to Fortinet Customer Care when diagnosing any issues with your system.
|
Diagnose Commands |
Description |
|---|---|
blocklisted ip list
|
Displays the entire list of uploaded IP addresses for Global Protection > Blocklist > Blocklisted IPv4 tab |
blocklisted domain list
|
Displays the entire list of uploaded domains for Global Protection > Blocklist > Blocklisted Domains tab |
dataplane
Additional options: |
|
blocklisted-domain
|
Blocklisted Domains Blocklisted IPv4 addresses Detailed information about contents of DNS cache Detailed information about contents of DNS DQRM table Detailed information about contents of DNS LQ table Configuration information for each DNS profile (listed in order) Detailed information about contents of DNS TTL table Memory and usage of FortiGuard Domain Reputation table Detailed information about contents of the system Destination table Configuration information for each DTLS profile (listed in order) Detailed information about the capacity and usage of the Geo-IP table | Geo-IP information for an IP address Configuration information for each HTTP profile (listed in order) Configuration information for each ICMP profile (listed in order) Status of all system interfaces Detailed information on configuration and traffic for all system interfaces Operational status of each system port (not inline/bypass status which is Configuration information for each IP profile (listed in order) Memory and usage of FortiGuard IP Reputation table Detailed information about contents of the system Legitimate (non-spoofed) IP table Configuration information for each NTP profile (listed in order) Real-time numeric and % occupancy of many system tables Detailed information about contents of the system session table Detailed configuration, traffic and drop information for the named SPP Detailed information about contents of the system source table Configuration information for each SSL/TLS profile (listed in order) Configuration information for each TCP profile (listed in order) |
|
Additional options: |
|
|
|
set/get debug level for daemons set/get debug level for CLI and CMDB clear/get crashlog dataplane disable debug output enable debug output set/get debug level for kernel get mysql error log get nginx error log Perform RRD commands check. Will show errors only. Re-create RRD commands – used for graphing Check RRD status for each SPP Check RRD files count for each SPP Tune RRD database to eliminate drop count limit. |
|
Additional options: |
|
|
|
Fortinet use only List information for management ports Read data from a management port List information on PCI buses and connected devices List system hardware information |
|
|
Provides various lists of primarily management port routing information |
|
|
Sniffer commands for management ports |
|
Additional options: |
|
|
|
Lists top FortiDDoS processes – not the same as Linus top which should not be used – see above. Fortinet use only |
Special Fortinet Support commands
The commands described in this section are useful when you are troubleshooting an issue with the help of Fortinet Technical Support. Your Fortinet contact might ask you to run these commands to gather data they need to troubleshoot system issues.
execute backup diag_info
This command exports diagnostic information to a remote TFTP server. The following information is exported:
- System status
- Current configuration
- Hardware register values
- Event and DDoS attack log database
Use the following command syntax:
# execute backup diag_info tftp <tftp_server_ipaddress>
The filename generated stems from the appliance serial number and date. For example, diag_info-FIVM08TM20090022-2015-03-07-16-57.tgz.
The archive includes four files with filenames similar to the following:
back_status-FIVM08TM20090022-2015-03-07-16-57
back_cfg-FIVM08TM20090022-2015-03-07-16-57
back_hw_reg-FIVM08TM20090022-2015-03-07-16-57
back_logs-FIVM08TM20090022-2015-03-07-16-57.tgz
The logs archive includes four files with filenames similar to the following:
elog@002e0000000001.MAI
elog@002e0000000001.MAD
dlog.MAI
dlog.MAD
get commands
|
Get Commands |
Description |
|---|---|
system performance
|
Displays real-time CPU and Memory % usage, matching GUI Dashboard > Status: System Resources panel. Note: Standard Linux “top” command will not display correct system usage with DPDK processors. |