Fortinet black logo

CLI Reference

config user exchange

config user exchange

Configure MS Exchange server entries.

config user exchange

Description: Configure MS Exchange server entries.

edit <name>

set server-name {string}

set domain-name {string}

set username {string}

set password {password}

set ip {ipv4-address-any}

set connect-protocol [rpc-over-tcp|rpc-over-http|...]

set auth-type [spnego|ntlm|...]

set auth-level [connect|call|...]

set http-auth-type [basic|ntlm]

set ssl-min-proto-version [default|SSLv3|...]

set auto-discover-kdc [enable|disable]

set kdc-ip <ipv41>, <ipv42>, ...

next

end

config user exchange

Parameter

Description

Type

Size

Default

server-name

MS Exchange server hostname.

string

Maximum length: 63

domain-name

MS Exchange server fully qualified domain name.

string

Maximum length: 79

username

User name used to sign in to the server. Must have proper permissions for service.

string

Maximum length: 64

password

Password for the specified username.

password

Not Specified

ip

Server IPv4 address.

ipv4-address-any

Not Specified

0.0.0.0

connect-protocol

Connection protocol used to connect to MS Exchange service.

option

-

rpc-over-https

Option

Description

rpc-over-tcp

Connect using RPC-over-TCP. Use for MS Exchange 2010 and earlier versions. Supported in MS Exchange 2013.

rpc-over-http

Connect using RPC-over-HTTP. Use for MS Exchange 2016 and later versions. Supported in MS Exchange 2013.

rpc-over-https

Connect using RPC-over-HTTPS. Use for MS Exchange 2016 and later versions. Supported in MS Exchange 2013.

auth-type

Authentication security type used for the RPC protocol layer.

option

-

kerberos

Option

Description

spnego

Negotiate authentication.

ntlm

NTLM authentication.

kerberos

Kerberos authentication.

auth-level

Authentication security level used for the RPC protocol layer.

option

-

privacy

Option

Description

connect

RPC authentication level 'connect'.

call

RPC authentication level 'call'.

packet

RPC authentication level 'packet'.

integrity

RPC authentication level 'integrity'.

privacy

RPC authentication level 'privacy'.

http-auth-type

Authentication security type used for the HTTP transport.

option

-

ntlm

Option

Description

basic

Basic HTTP authentication.

ntlm

NTLM HTTP authentication.

ssl-min-proto-version

Minimum SSL/TLS protocol version for HTTPS transport .

option

-

default

Option

Description

default

Follow system global setting.

SSLv3

SSLv3.

TLSv1

TLSv1.

TLSv1-1

TLSv1.1.

TLSv1-2

TLSv1.2.

auto-discover-kdc

Enable/disable automatic discovery of KDC IP addresses.

option

-

enable

Option

Description

enable

Enable automatic discovery of KDC IP addresses.

disable

Disable automatic discovery of KDC IP addresses.

kdc-ip <ipv4>

KDC IPv4 addresses for Kerberos authentication.

KDC IPv4 addresses for Kerberos authentication.

string

Maximum length: 79

config user exchange

Configure MS Exchange server entries.

config user exchange

Description: Configure MS Exchange server entries.

edit <name>

set server-name {string}

set domain-name {string}

set username {string}

set password {password}

set ip {ipv4-address-any}

set connect-protocol [rpc-over-tcp|rpc-over-http|...]

set auth-type [spnego|ntlm|...]

set auth-level [connect|call|...]

set http-auth-type [basic|ntlm]

set ssl-min-proto-version [default|SSLv3|...]

set auto-discover-kdc [enable|disable]

set kdc-ip <ipv41>, <ipv42>, ...

next

end

config user exchange

Parameter

Description

Type

Size

Default

server-name

MS Exchange server hostname.

string

Maximum length: 63

domain-name

MS Exchange server fully qualified domain name.

string

Maximum length: 79

username

User name used to sign in to the server. Must have proper permissions for service.

string

Maximum length: 64

password

Password for the specified username.

password

Not Specified

ip

Server IPv4 address.

ipv4-address-any

Not Specified

0.0.0.0

connect-protocol

Connection protocol used to connect to MS Exchange service.

option

-

rpc-over-https

Option

Description

rpc-over-tcp

Connect using RPC-over-TCP. Use for MS Exchange 2010 and earlier versions. Supported in MS Exchange 2013.

rpc-over-http

Connect using RPC-over-HTTP. Use for MS Exchange 2016 and later versions. Supported in MS Exchange 2013.

rpc-over-https

Connect using RPC-over-HTTPS. Use for MS Exchange 2016 and later versions. Supported in MS Exchange 2013.

auth-type

Authentication security type used for the RPC protocol layer.

option

-

kerberos

Option

Description

spnego

Negotiate authentication.

ntlm

NTLM authentication.

kerberos

Kerberos authentication.

auth-level

Authentication security level used for the RPC protocol layer.

option

-

privacy

Option

Description

connect

RPC authentication level 'connect'.

call

RPC authentication level 'call'.

packet

RPC authentication level 'packet'.

integrity

RPC authentication level 'integrity'.

privacy

RPC authentication level 'privacy'.

http-auth-type

Authentication security type used for the HTTP transport.

option

-

ntlm

Option

Description

basic

Basic HTTP authentication.

ntlm

NTLM HTTP authentication.

ssl-min-proto-version

Minimum SSL/TLS protocol version for HTTPS transport .

option

-

default

Option

Description

default

Follow system global setting.

SSLv3

SSLv3.

TLSv1

TLSv1.

TLSv1-1

TLSv1.1.

TLSv1-2

TLSv1.2.

auto-discover-kdc

Enable/disable automatic discovery of KDC IP addresses.

option

-

enable

Option

Description

enable

Enable automatic discovery of KDC IP addresses.

disable

Disable automatic discovery of KDC IP addresses.

kdc-ip <ipv4>

KDC IPv4 addresses for Kerberos authentication.

KDC IPv4 addresses for Kerberos authentication.

string

Maximum length: 79