Table of Contents

FortiGate-7121F System Guide

Download PDF
Copy Link

Common SMM CLI operations

The following table lists many of the operations you can perform from the SMM CLI and the commands you use to perform them. Only a subset of these commands are available on the passive SMM as indicated below. Also, the <slot> option is not available on the passive SMM.

Action SMC CLI Commands IPMI Commands
Log into the CLI. Ctrl-R N/A
Log out of the CLI. Available on the passive module. exit (followed by Ctrl-R) N/A
Display all commands. Available on the passive module. help help
Display information about all SMC firmware in the chassis. info mc info
Display SMC device ID, Build Date/Number, SMC firmware information, address info, entity map for the device in the slot. Available on the passive module. info <slot> N/A
Switching active SMM. The active SMM becomes passive and the passive becomes active. Available on the passive module. smm_switch N/A
Display status, power budget and hot swap state for all modules. Available on the passive module. status N/A
List the IPMI channels. channel list channel info [<channel-number>]
Change the SDI verbosity level. <level> can be:
0: Alerts + Errors
1: Alerts + Errors + Verbose + Low-Level Errors
2: Alerts + Errors + Verbose + Low-Level Errors + PI traffic
3: Alerts + Errors + Verbose + Low-Level Errors + PI traffic + IPMB traffic + LAN Interface traffic
4: Same as 3

verbose <level>

N/A
Display the SMM time. Available on the passive module. time get sel time get
Set the SMM time. Available on the passive module. time set <yyy/mm/dd hh:mm:ss> sel time set <yyy/mm/dd hh:mm:ss>
Synchronize all module SMC times. time sync N/A
List SMM user accounts. Available on the passive module. user list user list [<channel number>]
Disable a user account. Available on the passive module. user disable <user-id> user disable <user-id>
Enable a user account. Available on the passive module. user enable <user-id> user enable <user-id>
Set a user account user name. Available on the passive module. user set name <user-id> <name> user set name <user-id> <name>
Set a user account password. Available on the passive module. user set password <user-id> <password> user set password <user-id> <password>
Set the privilege level that a user account has for a specified session-based IPMI <channel>. If a <channel> is not specified the privilege level is set for all IPMI channels. Available on the passive module. user priv <user-id> {callback | user | operator | administrator | no_access} [<channel>] user priv <user id> <privilege level> [<channel number>]
View a summary of users. N/A user summary
User test command. N/A user test
Display the SMM serial interface settings. Available on the passive module. serial print N/A
Set the SDI baud rate. Available on the passive module. serial set sdi baud <speed> N/A
Set the sniff baud rate when the console is disabled. Available on the passive module. serial set sdi default_sniff_baud <speed> N/A
Enable a console connection from the SMM to another module. serial set sdi enable <slot> N/A
Disable the console connection between the SMM and another module. Available on the passive module. serial set sdi disable <slot> N/A
Cold or warm reset a module. mc reset <slot> cold
mc reset <slot> warm
mc reset cold
mc reset warm
Run a module self test. N/A mc selftest
Power on a module. fru activate <slot> [<fruid>] picmg activate
Power off a module. fru deactivate <slot> [<fruid>] picmg deactivate
Reset a module. fru reset <slot> [<fruid>] picmg reset
Power cycle the chassis N/A chassis power cycle
Get chassis sttatus N/A chassis status
Display the LAN configuration. Available on the passive module. lan print <channel>  
Set LAN configuration. The kgkey and krkey options are used for RCMP+. lan set <channel> ipaddr <ip> [<netmask>]
lan set <channel> macaddr <mac>
lan set <channel> defgw ipaddr <ip>
lan set <channel> defgw macaddr <mac>
lan set <channel> kgkey <value>
lan set <channel> krkey <value>
lan set help
(use this command to display online help for LAN settings)
Enable or disable all LAN interfaces. lan disable <channel>
lan enable
<channel>
fortinetoem param set 0 1
fortinetoem param set 0 0
Set fan levels. Change or switch the active fan set.

fan_min_level <level>
fan_max_level <level>

<level> range is 0 - 20.

N/A
Change LED settings. N/A picmg led set help
(use this command to display online help for LED settings)
Display HPM.1 status. N/A hpm check
Run an HPM.1 upgrade. N/A hpm upgrade <.img> hpm upgrade <.img> all activate

Common SMM CLI operations

The following table lists many of the operations you can perform from the SMM CLI and the commands you use to perform them. Only a subset of these commands are available on the passive SMM as indicated below. Also, the <slot> option is not available on the passive SMM.

Action SMC CLI Commands IPMI Commands
Log into the CLI. Ctrl-R N/A
Log out of the CLI. Available on the passive module. exit (followed by Ctrl-R) N/A
Display all commands. Available on the passive module. help help
Display information about all SMC firmware in the chassis. info mc info
Display SMC device ID, Build Date/Number, SMC firmware information, address info, entity map for the device in the slot. Available on the passive module. info <slot> N/A
Switching active SMM. The active SMM becomes passive and the passive becomes active. Available on the passive module. smm_switch N/A
Display status, power budget and hot swap state for all modules. Available on the passive module. status N/A
List the IPMI channels. channel list channel info [<channel-number>]
Change the SDI verbosity level. <level> can be:
0: Alerts + Errors
1: Alerts + Errors + Verbose + Low-Level Errors
2: Alerts + Errors + Verbose + Low-Level Errors + PI traffic
3: Alerts + Errors + Verbose + Low-Level Errors + PI traffic + IPMB traffic + LAN Interface traffic
4: Same as 3

verbose <level>

N/A
Display the SMM time. Available on the passive module. time get sel time get
Set the SMM time. Available on the passive module. time set <yyy/mm/dd hh:mm:ss> sel time set <yyy/mm/dd hh:mm:ss>
Synchronize all module SMC times. time sync N/A
List SMM user accounts. Available on the passive module. user list user list [<channel number>]
Disable a user account. Available on the passive module. user disable <user-id> user disable <user-id>
Enable a user account. Available on the passive module. user enable <user-id> user enable <user-id>
Set a user account user name. Available on the passive module. user set name <user-id> <name> user set name <user-id> <name>
Set a user account password. Available on the passive module. user set password <user-id> <password> user set password <user-id> <password>
Set the privilege level that a user account has for a specified session-based IPMI <channel>. If a <channel> is not specified the privilege level is set for all IPMI channels. Available on the passive module. user priv <user-id> {callback | user | operator | administrator | no_access} [<channel>] user priv <user id> <privilege level> [<channel number>]
View a summary of users. N/A user summary
User test command. N/A user test
Display the SMM serial interface settings. Available on the passive module. serial print N/A
Set the SDI baud rate. Available on the passive module. serial set sdi baud <speed> N/A
Set the sniff baud rate when the console is disabled. Available on the passive module. serial set sdi default_sniff_baud <speed> N/A
Enable a console connection from the SMM to another module. serial set sdi enable <slot> N/A
Disable the console connection between the SMM and another module. Available on the passive module. serial set sdi disable <slot> N/A
Cold or warm reset a module. mc reset <slot> cold
mc reset <slot> warm
mc reset cold
mc reset warm
Run a module self test. N/A mc selftest
Power on a module. fru activate <slot> [<fruid>] picmg activate
Power off a module. fru deactivate <slot> [<fruid>] picmg deactivate
Reset a module. fru reset <slot> [<fruid>] picmg reset
Power cycle the chassis N/A chassis power cycle
Get chassis sttatus N/A chassis status
Display the LAN configuration. Available on the passive module. lan print <channel>  
Set LAN configuration. The kgkey and krkey options are used for RCMP+. lan set <channel> ipaddr <ip> [<netmask>]
lan set <channel> macaddr <mac>
lan set <channel> defgw ipaddr <ip>
lan set <channel> defgw macaddr <mac>
lan set <channel> kgkey <value>
lan set <channel> krkey <value>
lan set help
(use this command to display online help for LAN settings)
Enable or disable all LAN interfaces. lan disable <channel>
lan enable
<channel>
fortinetoem param set 0 1
fortinetoem param set 0 0
Set fan levels. Change or switch the active fan set.

fan_min_level <level>
fan_max_level <level>

<level> range is 0 - 20.

N/A
Change LED settings. N/A picmg led set help
(use this command to display online help for LED settings)
Display HPM.1 status. N/A hpm check
Run an HPM.1 upgrade. N/A hpm upgrade <.img> hpm upgrade <.img> all activate