Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

Configure decrypted traffic mirror.

  config firewall decrypted-traffic-mirror
      Description: Configure decrypted traffic mirror.
      edit <name>
          set dstmac {mac-address}
          set traffic-type {option1}, {option2}, ...
          set traffic-source [client|server|...]
          set interface <name1>, <name2>, ...
      next
  end

config firewall decrypted-traffic-mirror

Parameter Name Description Type Size
dstmac Set destination MAC address for mirrored traffic. mac-address Not Specified
traffic-type Types of decrypted traffic to be mirrored.
ssl: Mirror decrypted SSL traffic.
ssh: Mirror decrypted SSH traffic.
option -
traffic-source Source of decrypted traffic to be mirrored.
client: Mirror client side decrypted traffic.
server: Mirror server side decrypted traffic.
both: Mirror both client and server side decrypted traffic.
option -
interface <name> Decrypted traffic mirror interface
Decrypted traffic mirror interface.
string Maximum length: 79

Configure decrypted traffic mirror.

  config firewall decrypted-traffic-mirror
      Description: Configure decrypted traffic mirror.
      edit <name>
          set dstmac {mac-address}
          set traffic-type {option1}, {option2}, ...
          set traffic-source [client|server|...]
          set interface <name1>, <name2>, ...
      next
  end

config firewall decrypted-traffic-mirror

Parameter Name Description Type Size
dstmac Set destination MAC address for mirrored traffic. mac-address Not Specified
traffic-type Types of decrypted traffic to be mirrored.
ssl: Mirror decrypted SSL traffic.
ssh: Mirror decrypted SSH traffic.
option -
traffic-source Source of decrypted traffic to be mirrored.
client: Mirror client side decrypted traffic.
server: Mirror server side decrypted traffic.
both: Mirror both client and server side decrypted traffic.
option -
interface <name> Decrypted traffic mirror interface
Decrypted traffic mirror interface.
string Maximum length: 79