Fortinet white logo
Fortinet white logo

CLI Reference

diagnose sys

diagnose sys

system

This topic includes the following commands:

diagnose sys 5g-modem

5G modem.

diagnose sys 5g-modem

diagnose sys 5g-modem data-session-info

5G Modem data session information

diagnose sys 5g-modem data-session-info

diagnose sys 5g-modem gps-info

5G Modem GPS information

diagnose sys 5g-modem gps-info

diagnose sys 5g-modem modem-details

5G Modem detailed information

diagnose sys 5g-modem modem-details

diagnose sys 5g-modem signal-info

5G Modem signal information

diagnose sys 5g-modem signal-info

diagnose sys 5g-modem sim-info

5G Modem SIM card information

diagnose sys 5g-modem sim-info

diagnose sys 5g-modem traffic-status

5G Modem traffic status

diagnose sys 5g-modem traffic-status

diagnose sys 802-1x

802.1X diagnostics.

diagnose sys 802-1x

diagnose sys 802-1x status

Display 802.1X port-based authentication status.

diagnose sys 802-1x status

diagnose sys 802-1x valgrind

Valgrind analysis.

diagnose sys 802-1x valgrind

diagnose sys 802-1x valgrind disable

Force daemon to restart.

diagnose sys 802-1x valgrind disable

diagnose sys 802-1x valgrind enable

Force daemon to restart.

diagnose sys 802-1x valgrind enable

diagnose sys 802-1x valgrind log

Valgrind logs.

diagnose sys 802-1x valgrind log

diagnose sys 802-1x valgrind log clear

Clear logs.

diagnose sys 802-1x valgrind log clear

diagnose sys 802-1x valgrind log show

Show logs.

diagnose sys 802-1x valgrind log show

diagnose sys 802-1x valgrind memcheck

Force daemon to restart.

diagnose sys 802-1x valgrind memcheck

diagnose sys 802-1x valgrind memcheck_less

Force daemon to restart.

diagnose sys 802-1x valgrind memcheck_less

diagnose sys 802-1x valgrind status

Show valgrind status.

diagnose sys 802-1x valgrind status

diagnose sys acme

ACME client diagnostics.

diagnose sys acme

diagnose sys acme add-account

Import an ACME account to 'system acme.accounts'.

diagnose sys acme add-account <id> <url> <ca_url> <status> <contact> <privatekey> <passphrase>

Parameter

Description

Type

Size

<id>

Account ID.

string

<url>

Account URL.

string

<ca_url>

Account CA URL.

string

<status>

Account Status.

string

<contact>

Account Email.

string

<privatekey>

Account PEM private key.

string

<passphrase>

Account private key passphrase.

string

diagnose sys acme delete-cert

Delete certificate from the ACME cert store for a given domain.

diagnose sys acme delete-cert <domain>

Parameter

Description

Type

Size

<domain>

Certificate's CN domain.

string

diagnose sys acme list-archive

List the certificate archive.

diagnose sys acme list-archive

diagnose sys acme list-domains

List certificates currently present in the ACME cert store by CN domain.

diagnose sys acme list-domains

diagnose sys acme purge-all

Delete the whole ACME cert store, including account data.

diagnose sys acme purge-all

diagnose sys acme purge-archive

Delete everything in the cert store archive.

diagnose sys acme purge-archive

diagnose sys acme purge-certs

Delete all certificates from the ACME cert store.

diagnose sys acme purge-certs

diagnose sys acme regenerate-client-config

Regenerate config for mod_md.

diagnose sys acme regenerate-client-config

diagnose sys acme regenerate-store

Regenerate store from config.

diagnose sys acme regenerate-store

diagnose sys acme restart

Gracefully restart Apache.

diagnose sys acme restart

diagnose sys acme show-archive

Show the certificate archive for a given CN domain.

diagnose sys acme show-archive <domain>

Parameter

Description

Type

Size

<domain>

Certificate's CN domain.

string

diagnose sys acme show-client-config

Show config files for mod_md.

diagnose sys acme show-client-config

diagnose sys acme show-passphrase

Shows the plaintext passphrase of the ACME client store.

diagnose sys acme show-passphrase

diagnose sys acme status-full

Fetch the ACME client full status log for a given CN domain.

diagnose sys acme status-full <domain>

Parameter

Description

Type

Size

<domain>

Certifate's CN domain.

string

diagnose sys bcm_intf

Bcm sdk interface

diagnose sys bcm_intf

diagnose sys bcm_intf cli

sdk command line

diagnose sys bcm_intf cli <command>

Parameter

Description

Type

Size

<command>

command to sdk

string

diagnose sys bcm_intf cmd

sdk command line

diagnose sys bcm_intf cmd <command> <parameters>

Parameter

Description

Type

Size

<command>

getreg/dump/show/listreg/listmem/phy info/phy diag/ps

string

<parameters>

command parameter

string

diagnose sys bcm_intf console

Toggle BCM SDK console debug

diagnose sys bcm_intf console

diagnose sys bcm_intf sharedmem

Shared memory

diagnose sys bcm_intf sharedmem

diagnose sys bcm_intf stats

API stats

diagnose sys bcm_intf stats

diagnose sys botnet-domain

Botnet domain diagnostics.

diagnose sys botnet-domain

diagnose sys botnet-domain hit

Botnet domain hits.

diagnose sys botnet-domain hit

diagnose sys botnet-domain list

List botnet domain entry.

diagnose sys botnet-domain list

diagnose sys botnet-ip

Botnet IP diagnostics.

diagnose sys botnet-ip

diagnose sys botnet-ip find

Find botnet IP entry.

diagnose sys botnet-ip find <ip> <port> <proto>

Parameter

Description

Type

Size

<ip>

IP address.

string

<port>

Port number.

string

<proto>

Protocol number.

string

diagnose sys botnet-ip flush

Flush botnet IP entry hit count data.

diagnose sys botnet-ip flush

diagnose sys botnet-ip hit

Show botnet IP entry hit count data.

diagnose sys botnet-ip hit

diagnose sys botnet-ip list

List botnet IP entry.

diagnose sys botnet-ip list <offset> <number>

Parameter

Description

Type

Size

<offset>

Botnet IP entry offset.

string

<number>

The number of botnet IP entries to display.

string

diagnose sys certificate-blocklist

Certificate blocklist diagnostics.

diagnose sys certificate-blocklist

diagnose sys certificate-blocklist count

Get number of entries in malware certificate blocklist.

diagnose sys certificate-blocklist count

diagnose sys certificate-blocklist delete-mcdb

Delete malicious certificate database.

diagnose sys certificate-blocklist delete-mcdb

diagnose sys certificate-blocklist query

Query with a certificate hash.

diagnose sys certificate-blocklist query <value>

Parameter

Description

Type

Size

<value>

SHA1 hash

string

diagnose sys certificate-blocklist read-range

List entries in malware certificate blocklist based on starting index and count.

diagnose sys certificate-blocklist read-range <start> <count>

Parameter

Description

Type

Size

<start>

Index of first element

string

<count>

Number of elements

string

diagnose sys certificate-blocklist status

Display certificate blocklist status.

diagnose sys certificate-blocklist status

diagnose sys cmdb

CMDB related information.

diagnose sys cmdb

diagnose sys cmdb buf-sz

Show cmdb buffer size.

diagnose sys cmdb buf-sz

diagnose sys cmdb check-lock

Check CMDB lock.

diagnose sys cmdb check-lock

diagnose sys cmdb dump

Dump cmdb internal data.

diagnose sys cmdb dump

diagnose sys cmdb dump vdom

Dump vdom data.

diagnose sys cmdb dump vdom <global/vdom-name>

Parameter

Description

Type

Size

<global/vdom-name>

Dump global or vdom-name data details.

string

diagnose sys cmdb flag

CMDB related flags.

diagnose sys cmdb flag

diagnose sys cmdb flag info

CMDB related flags information.

diagnose sys cmdb flag info

diagnose sys cmdb flag reset

Reset CMDB related flags.

diagnose sys cmdb flag reset

diagnose sys cmdb flag reset script-running

Reset CMDB script-running flag.

diagnose sys cmdb flag reset script-running

diagnose sys cmdb info

CMDB information.

diagnose sys cmdb info

diagnose sys cmdb obj-verno

Display object version#.

diagnose sys cmdb obj-verno <global|vdom-name> <obj-path> <obj-name>

Parameter

Description

Type

Size

<global|vdom-name>

global or vdom-name.

string

<obj-path>

object path.

string

<obj-name>

object name.

string

diagnose sys cmdb refcnt

Datasource reference count.

diagnose sys cmdb refcnt

diagnose sys cmdb refcnt reset

Reset reference count to be consistent with real reference.

diagnose sys cmdb refcnt reset <path.object.mkey> <tablename>

Parameter

Description

Type

Size

<path.object.mkey>

Table.

string

<tablename>

Entry.

string

diagnose sys cmdb refcnt show

Show datasource reference details.

diagnose sys cmdb refcnt show <path.object.mkey> <tablename>

Parameter

Description

Type

Size

<path.object.mkey>

Table.

string

<tablename>

Entry.

string

diagnose sys cmdb set-readlock

Set CMDB read lock.

diagnose sys cmdb set-readlock

diagnose sys cmdb unset-readlock

Unset CMDB read lock.

diagnose sys cmdb unset-readlock

diagnose sys cmdb-profile

Get CMDB profile information.

diagnose sys cmdb-profile

diagnose sys cmdb-profile info

Get CMDB profile shm info.

diagnose sys cmdb-profile info

diagnose sys cmdb-profile node

Get CMDB profile by node.

diagnose sys cmdb-profile node <path.object[.attribute]>

Parameter

Description

Type

Size

<path.object[.attribute]>

Path to object/attribute.

string

diagnose sys cmdb-profile reset

Reset CMDB profile shm info.

diagnose sys cmdb-profile reset

diagnose sys cmdb-profile top10

sort nodes by operator's time

diagnose sys cmdb-profile top10

diagnose sys cmdb-profile top10 average

sort nodes by operator's average time

diagnose sys cmdb-profile top10 average [n]

Parameter

Description

Type

Size

[n]

get n nodes' profile (optional, default is 10)

string

diagnose sys cmdb-profile top10 total

sort nodes by operator's total time

diagnose sys cmdb-profile top10 total [n]

Parameter

Description

Type

Size

[n]

get n nodes' profile (optional, default is 10)

string

diagnose sys config-transaction

Config transaction related information.

diagnose sys config-transaction

diagnose sys config-transaction show

Show config transaction information.

diagnose sys config-transaction show

diagnose sys config-transaction show entity-by-txn

Show configuration objects being configured by individual transactions.

diagnose sys config-transaction show entity-by-txn <txn-id>

Parameter

Description

Type

Size

<txn-id>

Transaction ID.

string

diagnose sys config-transaction show mctx

Show mctx.

diagnose sys config-transaction show mctx

diagnose sys config-transaction show txn-cli-commands

Show CLI commands used in a given transaction.

diagnose sys config-transaction show txn-cli-commands <txn-id>

Parameter

Description

Type

Size

<txn-id>

Transaction ID.

string

diagnose sys config-transaction show txn-entity

Show configuration objects being configured in transactions.

diagnose sys config-transaction show txn-entity

diagnose sys config-transaction show txn-info

Show config transaction details.

diagnose sys config-transaction show txn-info

diagnose sys config-transaction show txn-lock

Show transaction lock status.

diagnose sys config-transaction show txn-lock

diagnose sys config-transaction show txn-meta

Show config transaction meta information.

diagnose sys config-transaction show txn-meta

diagnose sys config-transaction status

Show config transaction status in current CLI.

diagnose sys config-transaction status

diagnose sys confsync

config sync

diagnose sys confsync

diagnose sys confsync cached-csum

Show conf-sync cached checksum.

diagnose sys confsync cached-csum <global/vdom-name>

Parameter

Description

Type

Size

<global/vdom-name>

Show global or a specific vdom's cached checksum.

string

diagnose sys confsync csum-recalculate

Re-calculate conf-sync checksum.

diagnose sys confsync csum-recalculate <vdom-name> or <global>

Parameter

Description

Type

Size

<vdom-name> or <global>

Re-calculate conf-sync checksum.

string

diagnose sys confsync dump

dump confsyncd status

diagnose sys confsync dump <level>

Parameter

Description

Type

Size

<level>

<integer>

string

diagnose sys confsync showcsum

show conf-sync checksum

diagnose sys confsync showcsum <Enter> or <global/vdom-name> <level> or <object-fullpath> <Enter> or <entry-name>

Parameter

Description

Type

Size

<Enter> or <global/vdom-name>

<Enter> to show system checksum; <global/vdom-name> to show global/vdom-name detail checksum.

string

<level> or <object-fullpath>

<level> to show n-th level objects checksum; <object-fullpath> to show individual object's detail checksum.

string

<Enter> or <entry-name>

<Enter> to show the specific object's detail checksum; <entry-name> to show a single entry's detail checksum.

string

diagnose sys confsync status

status

diagnose sys confsync status

diagnose sys cpuset

cpuset

diagnose sys cpuset

diagnose sys cpuset interrupt

cpuset of interrupt

diagnose sys cpuset interrupt <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

id of an interrupt

string

<xxx>

cpuset mask

string

diagnose sys cpuset process

cpuset of process

diagnose sys cpuset process <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

pid of a process

string

<xxx>

cpuset mask

string

diagnose sys csf

Security Fabric diagnostics.

diagnose sys csf

diagnose sys csf authorization

Authorization requests and permits.

diagnose sys csf authorization

diagnose sys csf authorization accept

Authorize device to join CSF tree.

diagnose sys csf authorization accept <SN> [Name]

Parameter

Description

Type

Size

<SN>

Serial number.

string

[Name]

Optional entry name (if not passed SN is used).

string

diagnose sys csf authorization deny

Deny device from joining CSF tree.

diagnose sys csf authorization deny <SN> [Name]

Parameter

Description

Type

Size

<SN>

Serial number.

string

[Name]

Optional entry name (if not passed SN is used).

string

diagnose sys csf authorization pending-list

List of pending requests to join security fabric.

diagnose sys csf authorization pending-list

diagnose sys csf downstream

Show connected downstream FortiGates.

diagnose sys csf downstream [-x] [-a]

Parameter

Description

Type

Size

[-x]

Show encrypted tokens

string

[-a]

Show all devices

string

diagnose sys csf downstream-devices

Show downstream fabric device.

diagnose sys csf downstream-devices <device type> [vdom] [group]

Parameter

Description

Type

Size

<device type>

fabric device type (e.g. fortinac, fortimail, fortivoice, any).

string

[vdom]

Connecting VDOM.

string

[group]

CSF key group.

string

diagnose sys csf dynamic-sync-read

Read incoming dynamic sync data updates

diagnose sys csf dynamic-sync-read <count>

Parameter

Description

Type

Size

<count>

Number of updates to read

string

diagnose sys csf dynamic-sync-request

Get the current dynamic sync data from csfd

diagnose sys csf dynamic-sync-request

diagnose sys csf dynamic-sync-update

Change the dynamic sync update data

diagnose sys csf dynamic-sync-update <content> <count>

Parameter

Description

Type

Size

<content>

New data content string

string

<count>

Number of times to repeat the content string line

string

diagnose sys csf fabric-device

Debug fabric device handling.

diagnose sys csf fabric-device

diagnose sys csf fabric-device list

List all known fabric devices.

diagnose sys csf fabric-device list

diagnose sys csf file

csfd file management.

diagnose sys csf file

diagnose sys csf file cat

Dump file.

diagnose sys csf file cat <name>

Parameter

Description

Type

Size

<name>

Name of the file to be dumped.

string

diagnose sys csf file top-mem

Display largest files.

diagnose sys csf file top-mem [count]

Parameter

Description

Type

Size

[count]

Number of files to be displayed ([1 - 20] default = 5).

string

diagnose sys csf forticloud-id-list

List of FortiCloud IDs of downstreams.

diagnose sys csf forticloud-id-list

diagnose sys csf get-bulk-global-view

Request global view file

diagnose sys csf get-bulk-global-view [refresh seconds]

Parameter

Description

Type

Size

[refresh seconds]

Acceptable age for cached global file in seconds.

string

diagnose sys csf global

Show a summary of all connected members in Security Fabric.

diagnose sys csf global

diagnose sys csf initialize-cmd

send an init command for merge.

diagnose sys csf initialize-cmd <path> <cmdb_path> <cmdb_table>

Parameter

Description

Type

Size

<path>

fabric path made of serial numbers e.g: SNCURRENT:SNMIDDLE:SNDESTINATION.

string

<cmdb_path>

path for cmdb table

string

<cmdb_table>

cmdb table name

string

diagnose sys csf merge-cmd

send a merge command to downstream.

diagnose sys csf merge-cmd <path> <cmdb_path> <cmdb_table> <key> <new_key>

Parameter

Description

Type

Size

<path>

fabric path made of serial numbers e.g: SNCURRENT:SNMIDDLE:SNDESTINATION.

string

<cmdb_path>

path for cmdb table

string

<cmdb_table>

cmdb table name

string

<key>

current entry name

string

<new_key>

new entry name

string

diagnose sys csf neighbor

CSF enabled devices in adjacency.

diagnose sys csf neighbor

diagnose sys csf neighbor flush

Clear discovered physical addresses of adjacent devices.

diagnose sys csf neighbor flush [interface]

Parameter

Description

Type

Size

[interface]

Receiving local interface name.

string

diagnose sys csf neighbor list

List discovered physical addresses of adjacent devices.

diagnose sys csf neighbor list [interface]

Parameter

Description

Type

Size

[interface]

Receiving local interface name.

string

diagnose sys csf query

Query through CSF.

diagnose sys csf query <path> [-pt]

Parameter

Description

Type

Size

<path>

FGT1(SN):FGT2(SN):...:FGTn(SN)

string

[-pt]

-p:Partial process. -t:Send health check ping request.

string

diagnose sys csf ratelimit-test-sender

Floods a socket tunnel to test rate limit behaviour.

diagnose sys csf ratelimit-test-sender <serial>

Parameter

Description

Type

Size

<serial>

Serial number of destination FortiGate.

string

diagnose sys csf ratelimit-test-server

A dummy server for the unix tunnel rate limit testing to work against.

diagnose sys csf ratelimit-test-server <close-delay-seconds>

Parameter

Description

Type

Size

<close-delay-seconds>

Seconds to keep the client socket open after accepting it.

string

diagnose sys csf send-test-log-upstream

Send a test log to upstream

diagnose sys csf send-test-log-upstream

diagnose sys csf seqpacket-message-listener

Read a line over a tunneled seqpacket socket.

diagnose sys csf seqpacket-message-listener <all|root|upstream|downstream>

Parameter

Description

Type

Size

<all|root|upstream|downstream>

Client FortiGates to allow.

string

diagnose sys csf seqpacket-message-sender

Read a line over a tunneled seqpacket socket.

diagnose sys csf seqpacket-message-sender <serial> <all|root|upstream|downstream>

Parameter

Description

Type

Size

<serial>

Serial number of destination FortiGate.

string

<all|root|upstream|downstream>

Allow mode of the destination.

string

diagnose sys csf stream-message-listener

Read a line over a tunneled stream socket

diagnose sys csf stream-message-listener <all|root|upstream|downstream>

Parameter

Description

Type

Size

<all|root|upstream|downstream>

Client FortiGates to allow.

string

diagnose sys csf stream-message-sender

Read a line over a tunneled stream socket.

diagnose sys csf stream-message-sender <serial> <all|root|upstream|downstream>

Parameter

Description

Type

Size

<serial>

Serial number of destination FortiGate.

string

<all|root|upstream|downstream>

Allow mode of the destination.

string

diagnose sys csf trigger-info-update

Trigger an info file update

diagnose sys csf trigger-info-update <groups>

Parameter

Description

Type

Size

<groups>

CSF key groups in hex

string

diagnose sys csf tunnel-test-listener

Test the reliable tunnel, listener side

diagnose sys csf tunnel-test-listener

diagnose sys csf tunnel-test-sender

Test the reliable tunnel, sender side

diagnose sys csf tunnel-test-sender <target-sn> <msg-content> <repeats>

Parameter

Description

Type

Size

<target-sn>

SN to send the message to

string

<msg-content>

Content of the message

string

<repeats>

Number of times to repeat the message

string

diagnose sys csf upstream

Show connected upstream FortiGates.

diagnose sys csf upstream

diagnose sys csf versions

get latest incremental version of CSF groups.

diagnose sys csf versions

diagnose sys csum

System checksum.

diagnose sys csum <file>

Parameter

Description

Type

Size

<file>

File name.

string

diagnose sys dayst-info

Daylight saving time information.

diagnose sys dayst-info <timezone db name> [year]

Parameter

Description

Type

Size

<timezone db name>

Timezone Database Name.

string

[year]

year

string

diagnose sys device

Virtual domain device management.

diagnose sys device

diagnose sys device add

Add device to Virtual Domain.

diagnose sys device add <vdname> <devname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

<devname>

Device Name.

string

diagnose sys device delete

Delete device from Virtual Domain.

diagnose sys device delete <vdname> <devname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

<devname>

Device Name.

string

diagnose sys device list

List devices in Virtual Domain.

diagnose sys device list <vdname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

diagnose sys digital-io

Diagnose commands for digital-io.

diagnose sys digital-io

diagnose sys digital-io state

Show digital io state

diagnose sys digital-io state

diagnose sys dump-conserve-info

Dump all conserve related info to disk.

diagnose sys dump-conserve-info

diagnose sys elbc

elbc info

diagnose sys elbc

diagnose sys elbc haoc-hb-status

HAoC heartbeat status

diagnose sys elbc haoc-hb-status

diagnose sys emac-vlan

EMAC VLAN diagnostics.

diagnose sys emac-vlan

diagnose sys emac-vlan fdb

EMAC VLAN forwarding DB.

diagnose sys emac-vlan fdb

diagnose sys emac-vlan fdb list

Display EMAC VLAN forwarding DB.

diagnose sys emac-vlan fdb list <string>

Parameter

Description

Type

Size

<string>

Interface name.

string

diagnose sys emac-vlan stat

Statistics of EMAC VLAN interfaces.

diagnose sys emac-vlan stat <string>

Parameter

Description

Type

Size

<string>

Underlying interface name.

string

diagnose sys external-address-resource

External address resource.

diagnose sys external-address-resource

diagnose sys external-address-resource list

list

diagnose sys external-address-resource list <name>

Parameter

Description

Type

Size

<name>

External address resource name.

string

diagnose sys external-mac-resource

External mac resource.

diagnose sys external-mac-resource

diagnose sys external-mac-resource list

list

diagnose sys external-mac-resource list <name>

Parameter

Description

Type

Size

<name>

External mac resource name.

string

diagnose sys external-resource

External resource.

diagnose sys external-resource

diagnose sys external-resource list

Dump external resource file by name.

diagnose sys external-resource list <name>

Parameter

Description

Type

Size

<name>

Name of external resource.

string

diagnose sys external-resource push-add

Add entry to external resource set to push updates.

diagnose sys external-resource push-add

diagnose sys external-resource push-api-json-commands

Test push commands JSON API

diagnose sys external-resource push-api-json-commands <COMMANDS-JSON>

Parameter

Description

Type

Size

<COMMANDS-JSON>

JSON string for commands.

string

diagnose sys external-resource push-remove

Remove entry to push external resource set to push updates.

diagnose sys external-resource push-remove

diagnose sys external-resource push-snapshot

Overwrite external resource set to push updates.

diagnose sys external-resource push-snapshot

diagnose sys external-resource stats

Display external resource file info.

diagnose sys external-resource stats <name>

Parameter

Description

Type

Size

<name>

Name of external resource.

string

diagnose sys external-resource stats-cache

Display cached external resource file stats.

diagnose sys external-resource stats-cache <name>

Parameter

Description

Type

Size

<name>

Name of external resource.

string

diagnose sys filesystem

File system.

diagnose sys filesystem

diagnose sys filesystem hash

Generate hash for files within the filesystem.

diagnose sys filesystem hash

diagnose sys filesystem last-modified-files

List the last modified files.

diagnose sys filesystem last-modified-files [path] [number]

Parameter

Description

Type

Size

[path]

Path for listing modified files (default = /data).

string

[number]

Number of files to list (default = 10).

string

diagnose sys filesystem lsof

List open files

diagnose sys filesystem lsof

diagnose sys filesystem open-files

List open files.

diagnose sys filesystem open-files [path]

Parameter

Description

Type

Size

[path]

Path of file or directory to check against.

string

diagnose sys filesystem tree

List the top files/folders tree.

diagnose sys filesystem tree [path] [number]

Parameter

Description

Type

Size

[path]

Path for listing files/folder (default = /var/log).

string

[number]

Number of files in each current folder and subfolder to be listed (default = 10).

string

diagnose sys fips

FIPS mode.

diagnose sys fips

diagnose sys fips error-mode

Go to error mode.

diagnose sys fips error-mode

diagnose sys fips kat-error

Force test failure at next self-test.

diagnose sys fips kat-error <KAT>

Parameter

Description

Type

Size

<KAT>

KAT, empty to display available values.

string

diagnose sys flash

Flash image.

diagnose sys flash

diagnose sys flash format

format shared data partition (flash partition #3)

diagnose sys flash format

diagnose sys flash list

List flash images.

diagnose sys flash list <file>

Parameter

Description

Type

Size

<file>

List files.

string

diagnose sys forticonverter

FortiConverter config conversion service diagnostics.

diagnose sys forticonverter set-prompt-visibility

Parameter

Description

Type

Size

set-prompt-visibility

Set the visibility for the FortiConverter wizard on login.

option

diagnose sys forticonverter available-source-devices

Retrieve known source device options for a ticket.

diagnose sys forticonverter available-source-devices <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve device information for.

string

diagnose sys forticonverter create-ticket

Create a ticket for FortiConverter conversion services.

diagnose sys forticonverter create-ticket

diagnose sys forticonverter custom-create-ticket

Use the custom request API to create a ticket for FortiConverter conversion services.

diagnose sys forticonverter custom-create-ticket

diagnose sys forticonverter download-status

Get current download status.

diagnose sys forticonverter download-status <ticket-id> <extension>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to check for download status

string

<extension>

Extension of the file to check.

string

diagnose sys forticonverter eligibility-status

Show current FortiConverter eligibility status.

diagnose sys forticonverter eligibility-status

diagnose sys forticonverter get-prompt-visibility

Read the visibility status for the FortiConverter wizard on login.

diagnose sys forticonverter get-prompt-visibility

diagnose sys forticonverter result-availability

Retrieve result file availability status for a ticket.

diagnose sys forticonverter result-availability <ticket-id> <extension>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve result availability for.

string

<extension>

File extension to retrieve availability for.

string

diagnose sys forticonverter set-source-fortigate

Set the source FortiGate for a FortiConverter ticket.

diagnose sys forticonverter set-source-fortigate <ticket-id> <source-serial>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to set the source FortiGate for.

string

<source-serial>

Serial number of the source FortiGate.

string

diagnose sys forticonverter source-config-upload-status

Retrieve source config upload status for a draft ticket.

diagnose sys forticonverter source-config-upload-status <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve source config upload status info for.

string

diagnose sys forticonverter source-interfaces

Retrieve source interface JSON for a draft ticket.

diagnose sys forticonverter source-interfaces <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve interface information for.

string

diagnose sys forticonverter start-download

Start download of config from a ticket.

diagnose sys forticonverter start-download <ticket-id> <extension>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to download from.

string

<extension>

Extension of the file to download.

string

diagnose sys forticonverter submitted-info

Retrieve previously submitted info for a draft ticket.

diagnose sys forticonverter submitted-info <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve submitted info for.

string

diagnose sys forticonverter update-eligibility

Request updated eligibility status from FortiConverter.

diagnose sys forticonverter update-eligibility

diagnose sys forticonverter update-result-availability

Request updated result availability from FortiConverter.

diagnose sys forticonverter update-result-availability

diagnose sys forticonverter upload-local-config

Upload local config to a ticket for this FGT. Debugging purposes only.

diagnose sys forticonverter upload-local-config <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to upload config to.

string

diagnose sys forticonverter upload-status

Retrieve upload status for a ticket.

diagnose sys forticonverter upload-status <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to upload config to.

string

diagnose sys fortiswitch-heartbeat

fortiswitch heart beat information

diagnose sys fortiswitch-heartbeat

diagnose sys fortiswitch-heartbeat assist-pkt-stats

assistant packet statistics

diagnose sys fortiswitch-heartbeat assist-pkt-stats

diagnose sys fortiswitch-heartbeat assist-pkt-stats clear

reset assistant packet statistics

diagnose sys fortiswitch-heartbeat assist-pkt-stats clear

diagnose sys fortiswitch-heartbeat config

calculated ELBC config

diagnose sys fortiswitch-heartbeat config

diagnose sys fortiswitch-heartbeat status

heartbeat status

diagnose sys fortiswitch-heartbeat status

diagnose sys fullcone

Fullcone diagnostics.

diagnose sys fullcone

diagnose sys geneve

GENEVE diagnostics.

diagnose sys geneve

diagnose sys geneve list

Display GENEVE devices.

diagnose sys geneve list

diagnose sys geneve stat

Display GENEVE statistics.

diagnose sys geneve stat

diagnose sys gre

GRE diagnostics.

diagnose sys gre

diagnose sys gre keepalive

Keepalive status in GRE tunnels.

diagnose sys gre keepalive <name | all>

Parameter

Description

Type

Size

<name | all>

GRE tunnel name

string

diagnose sys gre list

List GRE tunnels.

diagnose sys gre list

diagnose sys h323

H323 diagnostics.

diagnose sys h323

diagnose sys h323 call

H323 calls.

diagnose sys h323 call

diagnose sys h323 call list

List H323 calls.

diagnose sys h323 call list

diagnose sys h323 debug-mask

Mask for H323 kernel trace.

diagnose sys h323 debug-mask <mask>

Parameter

Description

Type

Size

<mask>

0-disable, 1-parser, 2-CS, 4-RAS, 8-h245.

string

diagnose sys h323 peer

H323 peers.

diagnose sys h323 peer

diagnose sys h323 peer list

List H323 peers.

diagnose sys h323 peer list

diagnose sys h323 status

Display h323 status.

diagnose sys h323 status

diagnose sys ha

High availability.

diagnose sys ha

diagnose sys ha check-vc

check-vc

diagnose sys ha check-vc

diagnose sys ha checksum

checksum.

diagnose sys ha checksum

diagnose sys ha checksum cached

Show HA cached checksum.

diagnose sys ha checksum cached <global/vdom-name>

Parameter

Description

Type

Size

<global/vdom-name>

Show global or a specific vdom's cached HA checksum.

string

diagnose sys ha checksum cluster

Show HA cluster checksum by serial number.

diagnose sys ha checksum cluster

diagnose sys ha checksum log

Enable/disable log.

diagnose sys ha checksum log

diagnose sys ha checksum log clear

Clear log.

diagnose sys ha checksum log clear

diagnose sys ha checksum log disable

Disable log.

diagnose sys ha checksum log disable

diagnose sys ha checksum log enable

Enable log.

diagnose sys ha checksum log enable

diagnose sys ha checksum recalculate

Re-calculate HA checksum.

diagnose sys ha checksum recalculate <Enter> or <global/vdom-name>

Parameter

Description

Type

Size

<Enter> or <global/vdom-name>

<Enter> to re-calculate all checksums, or global/vdom-name to re-calculate global or a specific vdom HA checksum.

string

diagnose sys ha checksum show

Show HA checksum.

diagnose sys ha checksum show <Enter> or <global/vdom-name> <Enter> or <object-fullpath> <Enter> or <entry-name>

Parameter

Description

Type

Size

<Enter> or <global/vdom-name>

<Enter> to show system checksum; <global/vdom-name> to show global/vdom-name detail checksum.

string

<Enter> or <object-fullpath>

<Enter> to show objects checksum; <object-fullpath> to show individual object's detail checksum.

string

<Enter> or <entry-name>

<Enter> to show the specific object's detail checksum; <entry-name> to show a single entry's detail checksum.

string

diagnose sys ha checksum show-nonsync

Show non-sync HA checksum.

diagnose sys ha checksum show-nonsync

diagnose sys ha checksum test

test.

diagnose sys ha checksum test

diagnose sys ha dump-by

Dump HA data by name.

diagnose sys ha dump-by

diagnose sys ha dump-by debug-zone

Dump HA debug zone.

diagnose sys ha dump-by debug-zone

diagnose sys ha dump-by device

Dump HA device.

diagnose sys ha dump-by device

diagnose sys ha dump-by group

Dump all group.

diagnose sys ha dump-by group

diagnose sys ha dump-by kernel

Dump HA kernel info.

diagnose sys ha dump-by kernel

diagnose sys ha dump-by rcache

Dump rcache.

diagnose sys ha dump-by rcache

diagnose sys ha dump-by vcluster

Dump all vcluster.

diagnose sys ha dump-by vcluster

diagnose sys ha dump-by vdom

Dump HA vdom info.

diagnose sys ha dump-by vdom

diagnose sys ha extfile-sig

Dump extfile's signature.

diagnose sys ha extfile-sig

diagnose sys ha fgsp-zone

FGSP zone information.

diagnose sys ha fgsp-zone

diagnose sys ha fib

FIB information.

diagnose sys ha fib

diagnose sys ha hactx-stats

HA context statistics

diagnose sys ha hactx-stats

diagnose sys ha hactx-stats clear

HA context statistics

diagnose sys ha hactx-stats clear

diagnose sys ha hadiff

HA diff debug.

diagnose sys ha hadiff

diagnose sys ha hadiff log

Enable/disable log.

diagnose sys ha hadiff log

diagnose sys ha hadiff log clear

Clear log.

diagnose sys ha hadiff log clear

diagnose sys ha hadiff log disable

Disable log.

diagnose sys ha hadiff log disable

diagnose sys ha hadiff log enable

Enable log.

diagnose sys ha hadiff log enable

diagnose sys ha hadiff max-sync-turns

Set/get max number of sync turns.

diagnose sys ha hadiff max-sync-turns <integer>

Parameter

Description

Type

Size

<integer>

Set/get max number of sync turns.

string

diagnose sys ha hadiff max-unsync-wait

Set/get max unsync wait times.

diagnose sys ha hadiff max-unsync-wait <integer>

Parameter

Description

Type

Size

<integer>

Maximum unsync wait times.

string

diagnose sys ha hadiff status

HA diff status.

diagnose sys ha hadiff status

diagnose sys ha hadiff sync-from-higher

enable/disable sync config from higher build.

diagnose sys ha hadiff sync-from-higher <Integer>

Parameter

Description

Type

Size

<Integer>

the value: 0(=disable), 1(=enable).

string

diagnose sys ha hasync-conn-max-buf

Set the hasync connection maximum buffer number.

diagnose sys ha hasync-conn-max-buf <hasync-conn-max-buf>

Parameter

Description

Type

Size

<hasync-conn-max-buf>

Max number of buffers.

string

diagnose sys ha hasync-stats

hasync daemon stats.

diagnose sys ha hasync-stats

diagnose sys ha hasync-stats all

Display hasync all objects' stats.

diagnose sys ha hasync-stats all

diagnose sys ha hasync-stats by-object

Display hasync stats by object.

diagnose sys ha hasync-stats by-object <integer>

Parameter

Description

Type

Size

<integer>

Object number.

string

diagnose sys ha hasync-stats most-recent

Display hasync objects recent stats.

diagnose sys ha hasync-stats most-recent [integer]

Parameter

Description

Type

Size

[integer]

Most recent # of objects to display.

string

diagnose sys ha hasync-stats most-time

Display hasync objects ranked by total time.

diagnose sys ha hasync-stats most-time [interger]

Parameter

Description

Type

Size

[interger]

# of top objects to display.

string

diagnose sys ha heartbeat

Show kernel heartbeat stats.

diagnose sys ha heartbeat

diagnose sys ha history

Cluster history information.

diagnose sys ha history

diagnose sys ha history clear

Clear cluster history.

diagnose sys ha history clear

diagnose sys ha history read

Display cluster history.

diagnose sys ha history read

diagnose sys ha mac

Mac Information.

diagnose sys ha mac

diagnose sys ha pingsvr-secondary-force-reset

Reset HA up time.

diagnose sys ha pingsvr-secondary-force-reset

diagnose sys ha recalculate-extfile-signature

Recalculate external files signature in hasync daemon.

diagnose sys ha recalculate-extfile-signature

diagnose sys ha reset-health-status

Reset HA health status.

diagnose sys ha reset-health-status

diagnose sys ha reset-uptime

Reset HA up time.

diagnose sys ha reset-uptime

diagnose sys ha reset-uptime-primary-only

Reset HA up time (can take effect on primary unit only).

diagnose sys ha reset-uptime-primary-only

diagnose sys ha session-sync-dev

Session sync ports.

diagnose sys ha session-sync-dev

diagnose sys ha session-sync-dev clear

Clear session sync ports.

diagnose sys ha session-sync-dev clear

diagnose sys ha session-sync-dev set

Configure session sync ports.

diagnose sys ha session-sync-dev set

diagnose sys ha standalone-peers

Standalone peers on kernel.

diagnose sys ha standalone-peers

diagnose sys ha standalone-peers reset-stats

Reset standalone peers session/packet type counters in kernel.

diagnose sys ha standalone-peers reset-stats

diagnose sys ha stats

statistics

diagnose sys ha stats

diagnose sys ha status

status

diagnose sys ha status

diagnose sys ha sync-stats

Dump HA sync statistics.

diagnose sys ha sync-stats

diagnose sys ha sync-stats-reset

Reset HA sync statistics.

diagnose sys ha sync-stats-reset

diagnose sys ha vlan-hb-monitor

Dump vlan heartbeat monitor list.

diagnose sys ha vlan-hb-monitor

diagnose sys icap-remote-server

Display remote icap servers status.

diagnose sys icap-remote-server

diagnose sys icap-remote-server status

List remote icap servers status.

diagnose sys icap-remote-server status

diagnose sys iotop

Show disk-accessing processes.

diagnose sys iotop <interval>

Parameter

Description

Type

Size

<interval>

Print interval in seconds (default to 5). Accept value from 5 to 3600.

string

diagnose sys ipam

IP Address Management diagnostics.

diagnose sys ipam

diagnose sys ipam delete

delete

diagnose sys ipam delete

diagnose sys ipam delete device

Delete device from IPAM server.

diagnose sys ipam delete device <sn>

Parameter

Description

Type

Size

<sn>

SN of device to delete from IPAM server.

string

diagnose sys ipam largest-available-subnet

Get the largest currently available subnet size.

diagnose sys ipam largest-available-subnet

diagnose sys ipam list

list

diagnose sys ipam list

diagnose sys ipam list entries

List IPAM entries.

diagnose sys ipam list entries

diagnose sys ipam list free-subnets

List free IPAM subnets.

diagnose sys ipam list free-subnets

diagnose sys ipsec-aggregate

IPsec aggregate diagnostics.

diagnose sys ipsec-aggregate

diagnose sys ipsec-aggregate list

List IPsec aggregates.

diagnose sys ipsec-aggregate list <name>

Parameter

Description

Type

Size

<name>

IPsec aggregate name

string

diagnose sys kill

Kill the process ID.

diagnose sys kill <signal> <pid>

Parameter

Description

Type

Size

<signal>

Signal number.

string

<pid>

Process ID.

string

diagnose sys link-monitor

Link Monitor.

diagnose sys link-monitor

diagnose sys link-monitor filter

Filter link-monitor

diagnose sys link-monitor filter

diagnose sys link-monitor filter clear

Clear all filters.

diagnose sys link-monitor filter clear

diagnose sys link-monitor filter name

Link monitor names <name>.

diagnose sys link-monitor filter name <name>

Parameter

Description

Type

Size

<name>

Link monitor name.

string

diagnose sys link-monitor interface

interface quality.

diagnose sys link-monitor interface <name> <childname>

Parameter

Description

Type

Size

<name>

Show details of an interface entry.

string

<childname>

Child interface name.

string

diagnose sys link-monitor launch

Launching a link monitor entry manually.

diagnose sys link-monitor launch <entry name>

Parameter

Description

Type

Size

<entry name>

Entry.

string

diagnose sys link-monitor reset-monitor

Reset link monitor statistics.

diagnose sys link-monitor reset-monitor <name>

Parameter

Description

Type

Size

<name>

Link monitor name.

string

diagnose sys link-monitor sdwan-hc

SD-WAN health-check monitors.

diagnose sys link-monitor sdwan-hc <name> <seq>

Parameter

Description

Type

Size

<name>

Health check name.

string

<seq>

Sequence number.

string

diagnose sys link-monitor sdwan-service

SD-WAN rule monitors.

diagnose sys link-monitor sdwan-service <name> <seq>

Parameter

Description

Type

Size

<name>

Heach check name.

string

<seq>

Sequence number.

string

diagnose sys link-monitor shm-stats

Read link monitor statistics in SHM.

diagnose sys link-monitor shm-stats <name>

Parameter

Description

Type

Size

<name>

Link monitor name.

string

diagnose sys link-monitor status

status

diagnose sys link-monitor status <name | all>

Parameter

Description

Type

Size

<name | all>

Show details of monitor entry.

string

diagnose sys link-monitor tunnel

tunnel

diagnose sys link-monitor tunnel <name | all> <child name>

Parameter

Description

Type

Size

<name | all>

Show details of tunnel monitor entry.

string

<child name>

Show details of child monitor for tunnel.

string

diagnose sys link-monitor-passive

Link Monitor passive.

diagnose sys link-monitor-passive

diagnose sys link-monitor-passive admin

Passive reports measured by the kernel.

diagnose sys link-monitor-passive admin

diagnose sys link-monitor-passive admin delete

Delete a report.

diagnose sys link-monitor-passive admin delete <interface> <application>

Parameter

Description

Type

Size

<interface>

Interface device index.

string

<application>

Internet service or application ID.

string

diagnose sys link-monitor-passive admin flush

Flush all the reports.

diagnose sys link-monitor-passive admin flush

diagnose sys link-monitor-passive admin list

List one or all the collected passive reports.

diagnose sys link-monitor-passive admin list <interface> <application> <application>

Parameter

Description

Type

Size

<interface> <application>

List the passive report by the given interface and application.

string

<application>

Set the application.

string

diagnose sys link-monitor-passive admin list by-application

List passive reports and sort by application.

diagnose sys link-monitor-passive admin list by-application <application>

Parameter

Description

Type

Size

<application>

List reports of the given application.

string

diagnose sys link-monitor-passive admin list by-interface

List passive reports and sort by interface.

diagnose sys link-monitor-passive admin list by-interface <interface>

Parameter

Description

Type

Size

<interface>

List reports of the given interface

string

diagnose sys link-monitor-passive agent

Passive reports measured by agents.

diagnose sys link-monitor-passive agent

diagnose sys link-monitor-passive agent agent-oif-map

List agent and interface maps.

diagnose sys link-monitor-passive agent agent-oif-map

diagnose sys link-monitor-passive agent flush

Flush all the collected reports.

diagnose sys link-monitor-passive agent flush

diagnose sys link-monitor-passive agent flush-app

Flush details of all the applications.

diagnose sys link-monitor-passive agent flush-app

diagnose sys link-monitor-passive agent list

List all the collected reports.

diagnose sys link-monitor-passive agent list

diagnose sys link-monitor-passive agent list-app

List details of each application.

diagnose sys link-monitor-passive agent list-app

diagnose sys link-monitor-passive agent send-report

Mock an agent to send application performance.

diagnose sys link-monitor-passive agent send-report <src> <app_id> <app_name> <latency> <jitter> <pktloss> <ntt> <srt> <app_err>

Parameter

Description

Type

Size

<src>

Agent address.

string

<app_id>

Application ID.

string

<app_name>

Application name.

string

<latency>

Collected latency.

string

<jitter>

Collectd jitter.

string

<pktloss>

Collected pktloss

string

<ntt>

Collected ntt.

string

<srt>

Collectd srt.

string

<app_err>

Collected application errors

string

diagnose sys link-monitor-passive remote

Passive reports measured by remote peer.

diagnose sys link-monitor-passive remote

diagnose sys link-monitor-passive remote list

List one or all the collected reports.

diagnose sys link-monitor-passive remote list

diagnose sys logdisk

Display log disk status.

diagnose sys logdisk

diagnose sys logdisk purge-log-data

Purge disk log data, including disk logs and FortiView data.

diagnose sys logdisk purge-log-data

diagnose sys logdisk quota

Show log disk quota info.

diagnose sys logdisk quota

diagnose sys logdisk smart

Show log disk S.M.A.R.T. info.

diagnose sys logdisk smart

diagnose sys logdisk status

Display log disk status.

diagnose sys logdisk status

diagnose sys logdisk status monitor

Monitor log disk status.

diagnose sys logdisk status monitor

diagnose sys logdisk usage

Show log disk stats.

diagnose sys logdisk usage

diagnose sys lte-modem

lte-modem

diagnose sys lte-modem

diagnose sys lte-modem info

LTE Modem information

diagnose sys lte-modem info

diagnose sys mcast-session

multicast session

diagnose sys mcast-session

diagnose sys mcast-session clear

Clear the sessions defined by filter.

diagnose sys mcast-session clear

diagnose sys mcast-session filter

List session with filters.

diagnose sys mcast-session filter

diagnose sys mcast-session filter clear

Clear session filter.

diagnose sys mcast-session filter clear

diagnose sys mcast-session filter clear dport

Clear destination port filter.

diagnose sys mcast-session filter clear dport

diagnose sys mcast-session filter clear dst

Clear destination IP filter.

diagnose sys mcast-session filter clear dst

diagnose sys mcast-session filter clear proto

Clear protocol filter.

diagnose sys mcast-session filter clear proto

diagnose sys mcast-session filter clear sintf

Clear source interface filter.

diagnose sys mcast-session filter clear sintf

diagnose sys mcast-session filter clear sport

Clear source port filter.

diagnose sys mcast-session filter clear sport

diagnose sys mcast-session filter clear src

Clear source IP filter.

diagnose sys mcast-session filter clear src

diagnose sys mcast-session filter clear vd

Clear virtual domain filter.

diagnose sys mcast-session filter clear vd

diagnose sys mcast-session filter dport

Destination port.

diagnose sys mcast-session filter dport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys mcast-session filter dst

Destination IP address.

diagnose sys mcast-session filter dst <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP (from).

string

<xxx.xxx.xxx.xxx>

Destination IP (to).

string

diagnose sys mcast-session filter negate

Inverse filter.

diagnose sys mcast-session filter negate

diagnose sys mcast-session filter negate dport

Inverse destination port.

diagnose sys mcast-session filter negate dport

diagnose sys mcast-session filter negate dst

Inverse destination IP.

diagnose sys mcast-session filter negate dst

diagnose sys mcast-session filter negate proto

Inverse protocol.

diagnose sys mcast-session filter negate proto

diagnose sys mcast-session filter negate sintf

Inverse source interface.

diagnose sys mcast-session filter negate sintf

diagnose sys mcast-session filter negate sport

Inverse source port.

diagnose sys mcast-session filter negate sport

diagnose sys mcast-session filter negate src

Inverse source IP.

diagnose sys mcast-session filter negate src

diagnose sys mcast-session filter negate vd

Inverse virtual domain.

diagnose sys mcast-session filter negate vd

diagnose sys mcast-session filter proto

Protocol number.

diagnose sys mcast-session filter proto <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys mcast-session filter sintf

Source interface.

diagnose sys mcast-session filter sintf <xxxx>

Parameter

Description

Type

Size

<xxxx>

Interface name.

string

diagnose sys mcast-session filter sport

Source port.

diagnose sys mcast-session filter sport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys mcast-session filter src

Source IP address.

diagnose sys mcast-session filter src <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP (from).

string

<xxx.xxx.xxx.xxx>

Source IP (to).

string

diagnose sys mcast-session filter vd

Index of virtual domain. -1 matches all.

diagnose sys mcast-session filter vd <xxx>

Parameter

Description

Type

Size

<xxx>

Index of virtual domain. -1 matches all.

string

diagnose sys mcast-session list

List session.

diagnose sys mcast-session list

diagnose sys mcast-session stat

Stat session.

diagnose sys mcast-session stat

diagnose sys mcast-session6

IPv6 multicast session.

diagnose sys mcast-session6

diagnose sys mcast-session6 clear

Clear IPv6 multicast sessions defined by filter.

diagnose sys mcast-session6 clear

diagnose sys mcast-session6 filter

List IPv6 multicast session with filters.

diagnose sys mcast-session6 filter

diagnose sys mcast-session6 filter clear

Clear IPv6 multicast session filter.

diagnose sys mcast-session6 filter clear

diagnose sys mcast-session6 filter clear dport

Clear destination port filter.

diagnose sys mcast-session6 filter clear dport

diagnose sys mcast-session6 filter clear dst

Clear destination IP filter.

diagnose sys mcast-session6 filter clear dst

diagnose sys mcast-session6 filter clear proto

Clear protocol filter.

diagnose sys mcast-session6 filter clear proto

diagnose sys mcast-session6 filter clear sintf

Clear source interface filter.

diagnose sys mcast-session6 filter clear sintf

diagnose sys mcast-session6 filter clear sport

Clear source port filter.

diagnose sys mcast-session6 filter clear sport

diagnose sys mcast-session6 filter clear src

Clear source IP filter.

diagnose sys mcast-session6 filter clear src

diagnose sys mcast-session6 filter clear vd

Clear virtual domain filter.

diagnose sys mcast-session6 filter clear vd

diagnose sys mcast-session6 filter dport

Destination port.

diagnose sys mcast-session6 filter dport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys mcast-session6 filter dst

Destination IP address.

diagnose sys mcast-session6 filter dst <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP (from).

string

<xxx.xxx.xxx.xxx>

Destination IP (to).

string

diagnose sys mcast-session6 filter negate

Inverse filter.

diagnose sys mcast-session6 filter negate

diagnose sys mcast-session6 filter negate dport

Inverse destination port.

diagnose sys mcast-session6 filter negate dport

diagnose sys mcast-session6 filter negate dst

Inverse destination IP.

diagnose sys mcast-session6 filter negate dst

diagnose sys mcast-session6 filter negate proto

Inverse protocol.

diagnose sys mcast-session6 filter negate proto

diagnose sys mcast-session6 filter negate sintf

Inverse source interface.

diagnose sys mcast-session6 filter negate sintf

diagnose sys mcast-session6 filter negate sport

Inverse source port.

diagnose sys mcast-session6 filter negate sport

diagnose sys mcast-session6 filter negate src

Inverse source IP.

diagnose sys mcast-session6 filter negate src

diagnose sys mcast-session6 filter negate vd

Inverse virtual domain.

diagnose sys mcast-session6 filter negate vd

diagnose sys mcast-session6 filter proto

Protocol number.

diagnose sys mcast-session6 filter proto <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys mcast-session6 filter sintf

Source interface.

diagnose sys mcast-session6 filter sintf <xxxxx>

Parameter

Description

Type

Size

<xxxxx>

Interface name.

string

diagnose sys mcast-session6 filter sport

Source port.

diagnose sys mcast-session6 filter sport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys mcast-session6 filter src

Source IP address.

diagnose sys mcast-session6 filter src <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP (from).

string

<xxx.xxx.xxx.xxx>

Source IP (to).

string

diagnose sys mcast-session6 filter vd

Index of virtual domain. -1 matches all.

diagnose sys mcast-session6 filter vd <xxx>

Parameter

Description

Type

Size

<xxx>

Index of virtual domain. -1 matches all.

string

diagnose sys mcast-session6 list

List IPv6 multicast session.

diagnose sys mcast-session6 list

diagnose sys mcast-session6 stat

Stat IPv6 multicast session.

diagnose sys mcast-session6 stat

diagnose sys modem

modem

diagnose sys modem

diagnose sys modem cmd

cmd

diagnose sys modem cmd <at>

Parameter

Description

Type

Size

<at>

AT command for MODEM.

string

diagnose sys modem com

Start a interactive session.

diagnose sys modem com

diagnose sys modem detect

detect

diagnose sys modem detect

diagnose sys modem external-modem

Show external MODEM information.

diagnose sys modem external-modem

diagnose sys modem history

List MODEM usage history.

diagnose sys modem history

diagnose sys modem query

Query information from external MODEM.

diagnose sys modem query <[0|1]>

Parameter

Description

Type

Size

<[0|1]>

1 to force re-query via AT command.

string

diagnose sys modem reset

Reset serial driver from external MODEM.

diagnose sys modem reset

diagnose sys mpstat

mpstat

diagnose sys mpstat <value> <value>

Parameter

Description

Type

Size

<value>

Delay in seconds (default 5).

string

<value>

Loop times (default = 1,000,000).

string

diagnose sys mvl

Marvell

diagnose sys mvl

diagnose sys mvl clear

Clear switch port counters

diagnose sys mvl clear

diagnose sys mvl cli

Enter CPSS command line

diagnose sys mvl cli

diagnose sys mvl config

Show switch port configurations

diagnose sys mvl config

diagnose sys mvl counters

Show switch port counters

diagnose sys mvl counters

diagnose sys mvl flow

Dump of all flow-control related information

diagnose sys mvl flow

diagnose sys mvl log

Show CPSS log

diagnose sys mvl log

diagnose sys mvl packet-trace

Show device packet counters

diagnose sys mvl packet-trace

diagnose sys mvl sharedmem

Show shared memory

diagnose sys mvl sharedmem

diagnose sys mvl stats

Show API stats

diagnose sys mvl stats

diagnose sys mvl status

Show interface PHY parameters and status

diagnose sys mvl status

diagnose sys mvl tail-drop

Dump of all tail-drop related information

diagnose sys mvl tail-drop

diagnose sys mvl tail-drop-buff

Show current number of allocated buffers per port, per traffic class

diagnose sys mvl tail-drop-buff

diagnose sys mvl tail-drop-desc

Show current number of allocated descriptors per port, per traffic class

diagnose sys mvl tail-drop-desc

diagnose sys nmi-watchdog

nmi-watchdog

diagnose sys nmi-watchdog

diagnose sys nmi-watchdog disable

Disable NMI watchdog.

diagnose sys nmi-watchdog disable

diagnose sys nmi-watchdog enable

Enable NMI watchdog.

diagnose sys nmi-watchdog enable

diagnose sys ntp

NTP daemon command.

diagnose sys ntp

diagnose sys ntp status

List NTP servers information.

diagnose sys ntp status

diagnose sys pair

Pair device.

diagnose sys pair

diagnose sys platform

Platform information.

diagnose sys platform

diagnose sys platform info

Information.

diagnose sys platform info

diagnose sys print-conserve-info

Print all conserve related info.

diagnose sys print-conserve-info

diagnose sys process

Dump process stack.

diagnose sys process

diagnose sys process daemon-auto-restart

Set daemon respawn behaviour.

diagnose sys process daemon-auto-restart <action> <daemon>

Parameter

Description

Type

Size

<action>

(enable|disable)

string

<daemon>

Daemon name.

string

diagnose sys process dump

Dump process kernel stack.

diagnose sys process dump <pid>

Parameter

Description

Type

Size

<pid>

PID of the process to dump.

string

diagnose sys process nameof

List name of process with a specific PID.

diagnose sys process nameof <integer>

Parameter

Description

Type

Size

<integer>

PID to find the process name.

string

diagnose sys process pidof

List PIDs of processes with a specific name.

diagnose sys process pidof <string>

Parameter

Description

Type

Size

<string>

Name to find PIDs for.

string

diagnose sys process pstack

Dump process userspace stack.

diagnose sys process pstack <pid>

Parameter

Description

Type

Size

<pid>

PID of the process to dump.

string

diagnose sys process sock-mem

Show process socket mem usage.

diagnose sys process sock-mem

diagnose sys process socket

Find PID of processes which owns the socket.

diagnose sys process socket <socket-inode>

Parameter

Description

Type

Size

<socket-inode>

Socket to find PID for.

string

diagnose sys process trace

Sample process instructions.

diagnose sys process trace

diagnose sys profile

kernel profiling

diagnose sys profile

diagnose sys profile cpumask

profile which CPUs

diagnose sys profile cpumask

diagnose sys profile module

show kernel module

diagnose sys profile module

diagnose sys profile show

show kernel profiling result

diagnose sys profile show

diagnose sys profile show detail

show detail of kernel profiling

diagnose sys profile show detail

diagnose sys profile show order

order kernel profiling result

diagnose sys profile show order

diagnose sys profile start

start kernel profiling data

diagnose sys profile start

diagnose sys profile step

set profile step

diagnose sys profile step <Integer>

Parameter

Description

Type

Size

<Integer>

Profile step for CPU profiling. Argument should be a power of two between 2 to 32

string

diagnose sys profile stop

copy kernel profiling data

diagnose sys profile stop

diagnose sys profile sysmap

show kernel sysmap

diagnose sys profile sysmap

diagnose sys proxy

Proxy diagnostics.

diagnose sys proxy

diagnose sys proxy bypass

Bypass setting.

diagnose sys proxy bypass

diagnose sys proxy bypass clear

Clear bypass settings.

diagnose sys proxy bypass clear

diagnose sys proxy bypass disable

Disable bypass setiings.

diagnose sys proxy bypass disable

diagnose sys proxy bypass disable category

Disable category bypass.

diagnose sys proxy bypass disable category

diagnose sys proxy bypass disable category all

Bypass all.

diagnose sys proxy bypass disable category all

diagnose sys proxy bypass disable category scanunit-submission

Bypass scanunit submission.

diagnose sys proxy bypass disable category scanunit-submission

diagnose sys proxy bypass disable category ssl

Bypass SSL (no crypto, no utm).

diagnose sys proxy bypass disable category ssl

diagnose sys proxy bypass disable category utm

Bypass UTM (crypto, no utm).

diagnose sys proxy bypass disable category utm

diagnose sys proxy bypass disable protocol

Disable protocol bypass.

diagnose sys proxy bypass disable protocol

diagnose sys proxy bypass disable protocol all

All proxy protocols

diagnose sys proxy bypass disable protocol all

diagnose sys proxy bypass disable protocol ftp

FTP(S) protocol

diagnose sys proxy bypass disable protocol ftp

diagnose sys proxy bypass disable protocol imap

IMAP(S) protocol

diagnose sys proxy bypass disable protocol imap

diagnose sys proxy bypass disable protocol nntp

NNTP protocol

diagnose sys proxy bypass disable protocol nntp

diagnose sys proxy bypass disable protocol pop3

POP3(S) protocol

diagnose sys proxy bypass disable protocol pop3

diagnose sys proxy bypass disable protocol smtp

SMTP(S) protocol

diagnose sys proxy bypass disable protocol smtp

diagnose sys proxy bypass enable

Enable bypass settings.

diagnose sys proxy bypass enable

diagnose sys proxy bypass enable category

Enable category bypass.

diagnose sys proxy bypass enable category

diagnose sys proxy bypass enable category all

Bypass all.

diagnose sys proxy bypass enable category all

diagnose sys proxy bypass enable category scanunit-submission

Bypass scanunit submission.

diagnose sys proxy bypass enable category scanunit-submission

diagnose sys proxy bypass enable category ssl

Bypass SSL (no crypto, no utm).

diagnose sys proxy bypass enable category ssl

diagnose sys proxy bypass enable category utm

Bypass UTM (crypto, no utm).

diagnose sys proxy bypass enable category utm

diagnose sys proxy bypass enable protocol

Enable protocol bypass.

diagnose sys proxy bypass enable protocol

diagnose sys proxy bypass enable protocol all

All proxy protocols

diagnose sys proxy bypass enable protocol all

diagnose sys proxy bypass enable protocol ftp

FTP(S) protocol

diagnose sys proxy bypass enable protocol ftp

diagnose sys proxy bypass enable protocol imap

IMAP(S) protocol

diagnose sys proxy bypass enable protocol imap

diagnose sys proxy bypass enable protocol nntp

NNTP protocol

diagnose sys proxy bypass enable protocol nntp

diagnose sys proxy bypass enable protocol pop3

POP3(S) protocol

diagnose sys proxy bypass enable protocol pop3

diagnose sys proxy bypass enable protocol smtp

SMTP(S) protocol

diagnose sys proxy bypass enable protocol smtp

diagnose sys proxy bypass show

Show bypass settings.

diagnose sys proxy bypass show

diagnose sys proxy certificate-blocklist

Certificate blocklist diagnostics.

diagnose sys proxy certificate-blocklist

diagnose sys proxy certificate-blocklist flush

Flush certificate blocklist database.

diagnose sys proxy certificate-blocklist flush

diagnose sys proxy certificate-blocklist status

Display per worker certificate blocklist status.

diagnose sys proxy certificate-blocklist status

diagnose sys proxy debug-filter

Filter for displaying debug information.

diagnose sys proxy debug-filter

diagnose sys proxy debug-filter clear

Erase the current filter.

diagnose sys proxy debug-filter clear

diagnose sys proxy debug-filter list

Display the current filter.

diagnose sys proxy debug-filter list

diagnose sys proxy debug-filter src

Source address range to filter by.

diagnose sys proxy debug-filter src <ip-address> <ip-address>

Parameter

Description

Type

Size

<ip-address>

Source IP address (from).

string

<ip-address>

Source IP address (to).

string

diagnose sys proxy filter

Diagnostics filter.

diagnose sys proxy filter

diagnose sys proxy filter clear

Clear the current filter.

diagnose sys proxy filter clear

diagnose sys proxy filter list

Display the current filter.

diagnose sys proxy filter list

diagnose sys proxy filter negate

Negate the specified filter parameter.

diagnose sys proxy filter negate

diagnose sys proxy filter negate vd

Negate virtual domain.

diagnose sys proxy filter negate vd

diagnose sys proxy filter negate worker

Negate worker ID.

diagnose sys proxy filter negate worker

diagnose sys proxy filter vd

Index of virtual domain. -1 matches all.

diagnose sys proxy filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys proxy filter worker

ID of worker or "m" for manager. Invalid ID matches all.

diagnose sys proxy filter worker <id>

Parameter

Description

Type

Size

<id>

ID of worker or "m" for manager. Invalid ID matches all.

string

diagnose sys proxy log

Logging diagnostics.

diagnose sys proxy log

diagnose sys proxy log filter

Debug log filter.

diagnose sys proxy log filter

diagnose sys proxy log filter clear

Clear the current filter.

diagnose sys proxy log filter clear

diagnose sys proxy log filter list

Display the current filter.

diagnose sys proxy log filter list

diagnose sys proxy log filter negate

Negate the specified filter parameter.

diagnose sys proxy log filter negate

diagnose sys proxy log filter negate vd

Negate virtual domain.

diagnose sys proxy log filter negate vd

diagnose sys proxy log filter negate worker

Negate worker ID.

diagnose sys proxy log filter negate worker

diagnose sys proxy log filter vd

Index of virtual domain. -1 matches all.

diagnose sys proxy log filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys proxy log filter worker

ID of worker or "m" for manager. Invalid ID matches all.

diagnose sys proxy log filter worker <id>

Parameter

Description

Type

Size

<id>

ID of worker or "m" for manager. Invalid ID matches all.

string

diagnose sys proxy log-debug

Enable/disable sys proxy log on console.

diagnose sys proxy log-debug <integer>

Parameter

Description

Type

Size

<integer>

Enable/disable log on console, 0 off, otherwise, on.

string

diagnose sys proxy memory

Memory configuration

diagnose sys proxy memory

diagnose sys proxy memory allocator

Show the current memory allocator

diagnose sys proxy memory allocator

diagnose sys proxy memory conserve

Enter/exit conserve mode.

diagnose sys proxy memory conserve

diagnose sys proxy memory conserve enter

Enter conserve mode.

diagnose sys proxy memory conserve enter

diagnose sys proxy memory conserve exit

Exit conserve mode.

diagnose sys proxy memory conserve exit

diagnose sys proxy memory jemalloc

Use jemalloc for memory allocation

diagnose sys proxy memory jemalloc

diagnose sys proxy memory malloc

Use malloc for memory allocation

diagnose sys proxy memory malloc

diagnose sys proxy memory usage

Per-worker memory allocation statistics

diagnose sys proxy memory usage

diagnose sys proxy restart

Restart proxy.

diagnose sys proxy restart

diagnose sys proxy simulate-error

Error test options.

diagnose sys proxy simulate-error

diagnose sys proxy simulate-error scan-drop

Enable/disable proxy error scan drop.

diagnose sys proxy simulate-error scan-drop

diagnose sys proxy simulate-error scan-drop disable

Disable scan-drop (default)

diagnose sys proxy simulate-error scan-drop disable

diagnose sys proxy simulate-error scan-drop enable

Enable scan-drop

diagnose sys proxy simulate-error scan-drop enable

diagnose sys proxy simulate-error status

Display per worker error test options.

diagnose sys proxy simulate-error status

diagnose sys proxy socket-options

Socket options configuration

diagnose sys proxy socket-options

diagnose sys proxy socket-options linger

SO_LINGER socket option

diagnose sys proxy socket-options linger

diagnose sys proxy socket-options linger disable

Disable SO_LINGER

diagnose sys proxy socket-options linger disable

diagnose sys proxy socket-options linger enable

Enable SO_LINGER

diagnose sys proxy socket-options linger enable

diagnose sys proxy socket-options nagle

SSL TCP_NODELAY socket option

diagnose sys proxy socket-options nagle

diagnose sys proxy socket-options nagle disable

Disable TCP_NODELAY for SSL connections (Default)

diagnose sys proxy socket-options nagle disable

diagnose sys proxy socket-options nagle enable

Enable TCP_NODELAY for SSL connections

diagnose sys proxy socket-options nagle enable

diagnose sys proxy socket-options status

Display per worker socket options

diagnose sys proxy socket-options status

diagnose sys proxy ssl

SSL options

diagnose sys proxy ssl

diagnose sys proxy ssl bypass

Ssl bypass cache

diagnose sys proxy ssl bypass

diagnose sys proxy ssl bypass flush

Flush ssl bypass cache

diagnose sys proxy ssl bypass flush

diagnose sys proxy ssl bypass list

List ssl bypass cache

diagnose sys proxy ssl bypass list

diagnose sys proxy ssl crypto

Set hardware crypto mode

diagnose sys proxy ssl crypto

diagnose sys proxy ssl crypto async

Asynchronous hardware crypto

diagnose sys proxy ssl crypto async

diagnose sys proxy ssl crypto sync

Synchronous hardware crypto

diagnose sys proxy ssl crypto sync

diagnose sys proxy ssl exempt

Ssl exempt cache

diagnose sys proxy ssl exempt

diagnose sys proxy ssl exempt flush

Flush ssl exempt cache

diagnose sys proxy ssl exempt flush

diagnose sys proxy ssl exempt list

List ssl exempt cache

diagnose sys proxy ssl exempt list

diagnose sys proxy ssl rsa-blinding

Set RSA blinding

diagnose sys proxy ssl rsa-blinding

diagnose sys proxy ssl rsa-blinding off

RSA blinding off

diagnose sys proxy ssl rsa-blinding off

diagnose sys proxy ssl rsa-blinding on

RSA blinding on

diagnose sys proxy ssl rsa-blinding on

diagnose sys proxy ssl session

List of current SSL sessions

diagnose sys proxy ssl session

diagnose sys proxy stats

Proxy statistics.

diagnose sys proxy stats

diagnose sys proxy stats all

Per-process proxy statistics.

diagnose sys proxy stats all

diagnose sys proxy stats clear

Clear proxy statistics.

diagnose sys proxy stats clear

diagnose sys proxy stats debug

Debug sink statistics

diagnose sys proxy stats debug

diagnose sys proxy stats list

Summarized proxy statistics.

diagnose sys proxy stats list

diagnose sys proxy stats protocol

Per-process proxy worker protocol statistics.

diagnose sys proxy stats protocol

diagnose sys proxy stats vdom

Proxy vdom statistics.

diagnose sys proxy stats vdom

diagnose sys proxy stats vdom all

Proxy per-vdom statistics.

diagnose sys proxy stats vdom all

diagnose sys proxy stats vdom list

List current vdoms.

diagnose sys proxy stats vdom list

diagnose sys proxy stats vdom summary

Summarized vdom proxy statistics.

diagnose sys proxy stats vdom summary

diagnose sys proxy valgrind

Valgrind analysis.

diagnose sys proxy valgrind

diagnose sys proxy valgrind disable

Force daemon to restart.

diagnose sys proxy valgrind disable

diagnose sys proxy valgrind enable

Force daemon to restart.

diagnose sys proxy valgrind enable

diagnose sys proxy valgrind log

Valgrind logs.

diagnose sys proxy valgrind log

diagnose sys proxy valgrind log clear

Clear logs.

diagnose sys proxy valgrind log clear

diagnose sys proxy valgrind log show

Show logs.

diagnose sys proxy valgrind log show

diagnose sys proxy valgrind memcheck

Force daemon to restart.

diagnose sys proxy valgrind memcheck

diagnose sys proxy valgrind memcheck_less

Force daemon to restart.

diagnose sys proxy valgrind memcheck_less

diagnose sys proxy valgrind status

Show valgrind status.

diagnose sys proxy valgrind status

diagnose sys ptp

PTP daemon command.

diagnose sys ptp

diagnose sys ptp status

List PTP information.

diagnose sys ptp status

diagnose sys route_tag

route-tag.

diagnose sys route_tag

diagnose sys route_tag flush

Flush route tag address.

diagnose sys route_tag flush <route-tag>

Parameter

Description

Type

Size

<route-tag>

Flush cache of route-tag address in SD-WAN.

string

diagnose sys route_tag list

Show route tag address.

diagnose sys route_tag list <route-tag>

Parameter

Description

Type

Size

<route-tag>

Show details of route-tag address.

string

diagnose sys route_tag summary

route tag address summary.

diagnose sys route_tag summary

diagnose sys saml

SAML diagnostics.

diagnose sys saml

diagnose sys saml metadata

Test metadata.

diagnose sys saml metadata

diagnose sys scanunit

Scanunit diagnostics.

diagnose sys scanunit

diagnose sys scanunit auto-restart

Auto-restart settings.

diagnose sys scanunit auto-restart

diagnose sys scanunit auto-restart requests

Number of scan requests before restarting.

diagnose sys scanunit auto-restart requests <Integer>

Parameter

Description

Type

Size

<Integer>

Number of requests before restarting (0 disables auto restart).

string

diagnose sys scanunit auto-restart reset

Reset auto restart settings.

diagnose sys scanunit auto-restart reset

diagnose sys scanunit auto-restart status

Show auto restart settings.

diagnose sys scanunit auto-restart status

diagnose sys scanunit auto-restart time

Minimum interval in seconds between restarting workers.

diagnose sys scanunit auto-restart time <Integer>

Parameter

Description

Type

Size

<Integer>

Minimum interval in seconds between restarting workers.

string

diagnose sys scanunit av-filetype-reuse

Enable/disable AV filetype reuse.

diagnose sys scanunit av-filetype-reuse

diagnose sys scanunit av-filetype-reuse disable

Disable scanunit AV filetype reuse.

diagnose sys scanunit av-filetype-reuse disable

diagnose sys scanunit av-filetype-reuse enable

Enable scanunit AV filetype reuse.

diagnose sys scanunit av-filetype-reuse enable

diagnose sys scanunit bypass

Bypass setting.

diagnose sys scanunit bypass

diagnose sys scanunit bypass clear

Clear bypass settings.

diagnose sys scanunit bypass clear

diagnose sys scanunit bypass disable

Disable bypass setiings.

diagnose sys scanunit bypass disable

diagnose sys scanunit bypass disable category

Disable category bypass.

diagnose sys scanunit bypass disable category

diagnose sys scanunit bypass disable category all

Bypass all.

diagnose sys scanunit bypass disable category all

diagnose sys scanunit bypass disable category av-engine

Bypass AV engine.

diagnose sys scanunit bypass disable category av-engine

diagnose sys scanunit bypass disable category scanunit

Bypass scanunit.

diagnose sys scanunit bypass disable category scanunit

diagnose sys scanunit bypass disable protocol

Disable protocol bypass.

diagnose sys scanunit bypass disable protocol

diagnose sys scanunit bypass disable protocol all

All proxy protocols

diagnose sys scanunit bypass disable protocol all

diagnose sys scanunit bypass disable protocol cifs

CIFS protocol

diagnose sys scanunit bypass disable protocol cifs

diagnose sys scanunit bypass disable protocol ftp

FTP(S) protocol

diagnose sys scanunit bypass disable protocol ftp

diagnose sys scanunit bypass disable protocol http

HTTP(S) protocol

diagnose sys scanunit bypass disable protocol http

diagnose sys scanunit bypass disable protocol imap

IMAP(S) protocol

diagnose sys scanunit bypass disable protocol imap

diagnose sys scanunit bypass disable protocol nntp

NNTP protocol

diagnose sys scanunit bypass disable protocol nntp

diagnose sys scanunit bypass disable protocol pop3

POP3(S) protocol

diagnose sys scanunit bypass disable protocol pop3

diagnose sys scanunit bypass disable protocol smtp

SMTP(S) protocol

diagnose sys scanunit bypass disable protocol smtp

diagnose sys scanunit bypass enable

Enable bypass settings.

diagnose sys scanunit bypass enable

diagnose sys scanunit bypass enable category

Enable category bypass.

diagnose sys scanunit bypass enable category

diagnose sys scanunit bypass enable category all

Bypass all.

diagnose sys scanunit bypass enable category all

diagnose sys scanunit bypass enable category av-engine

Bypass AV engine.

diagnose sys scanunit bypass enable category av-engine

diagnose sys scanunit bypass enable category scanunit

Bypass scanunit.

diagnose sys scanunit bypass enable category scanunit

diagnose sys scanunit bypass enable protocol

Enable protocol bypass.

diagnose sys scanunit bypass enable protocol

diagnose sys scanunit bypass enable protocol all

All proxy protocols

diagnose sys scanunit bypass enable protocol all

diagnose sys scanunit bypass enable protocol cifs

CIFS protocol

diagnose sys scanunit bypass enable protocol cifs

diagnose sys scanunit bypass enable protocol ftp

FTP(S) protocol

diagnose sys scanunit bypass enable protocol ftp

diagnose sys scanunit bypass enable protocol http

HTTP(S) protocol

diagnose sys scanunit bypass enable protocol http

diagnose sys scanunit bypass enable protocol imap

IMAP(S) protocol

diagnose sys scanunit bypass enable protocol imap

diagnose sys scanunit bypass enable protocol nntp

NNTP protocol

diagnose sys scanunit bypass enable protocol nntp

diagnose sys scanunit bypass enable protocol pop3

POP3(S) protocol

diagnose sys scanunit bypass enable protocol pop3

diagnose sys scanunit bypass enable protocol smtp

SMTP(S) protocol

diagnose sys scanunit bypass enable protocol smtp

diagnose sys scanunit bypass show

Show bypass settings.

diagnose sys scanunit bypass show

diagnose sys scanunit cfg

Cached configuration.

diagnose sys scanunit cfg

diagnose sys scanunit cfg clear

Clear cached configuration.

diagnose sys scanunit cfg clear

diagnose sys scanunit cfg list

List the key for each cached configuration entry.

diagnose sys scanunit cfg list

diagnose sys scanunit crash-dump

Enable/disable crash dump.

diagnose sys scanunit crash-dump

diagnose sys scanunit crash-dump clear

Clear scanunit crash dump.

diagnose sys scanunit crash-dump clear

diagnose sys scanunit crash-dump disable

Disable scanunit crash dump.

diagnose sys scanunit crash-dump disable

diagnose sys scanunit crash-dump enable

Enable scanunit crash dump.

diagnose sys scanunit crash-dump enable

diagnose sys scanunit crash-dump read

Read the last crash dump.

diagnose sys scanunit crash-dump read

diagnose sys scanunit debug

Debug settings.

diagnose sys scanunit debug

diagnose sys scanunit debug all

Enable all debug categories.

diagnose sys scanunit debug all <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug analytics

Enable analytics category.

diagnose sys scanunit debug analytics <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug antispam

Enable antispam category.

diagnose sys scanunit debug antispam <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug daemon

Enable scanunit daemon category.

diagnose sys scanunit debug daemon <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug dlp

Enable DLP category.

diagnose sys scanunit debug dlp <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug file-filter

Enable file filter category.

diagnose sys scanunit debug file-filter <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug icb

Enable ICB category.

diagnose sys scanunit debug icb <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug job

Enable scanunit job category.

diagnose sys scanunit debug job <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug level

Set debug level.

diagnose sys scanunit debug level

diagnose sys scanunit debug level error

Error level.

diagnose sys scanunit debug level error

diagnose sys scanunit debug level info

Info level.

diagnose sys scanunit debug level info

diagnose sys scanunit debug level verbose

Verbose level.

diagnose sys scanunit debug level verbose

diagnose sys scanunit debug level warning

Warning level.

diagnose sys scanunit debug level warning

diagnose sys scanunit debug outbreak-prevention

Enable outbreak prevention category.

diagnose sys scanunit debug outbreak-prevention <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug quarantine

Enable quarantine category.

diagnose sys scanunit debug quarantine <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug reset

Reset debug category and level.

diagnose sys scanunit debug reset

diagnose sys scanunit debug sane

Enable a sane group of categories.

diagnose sys scanunit debug sane <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug show

Show current debug settings.

diagnose sys scanunit debug show

diagnose sys scanunit dlp

DLP data size scanning threshold settings.

diagnose sys scanunit dlp

diagnose sys scanunit dlp reset

Reset DLP data size scanning threshold value.

diagnose sys scanunit dlp reset

diagnose sys scanunit dlp status

Show DLP data size scanning threshold value.

diagnose sys scanunit dlp status

diagnose sys scanunit dlp threshold

Set DLP data size scanning threshold in bytes (0 = default).

diagnose sys scanunit dlp threshold <Integer>

Parameter

Description

Type

Size

<Integer>

DLP data size scanning threshold.

string

diagnose sys scanunit file-hash

File hash list.

diagnose sys scanunit file-hash

diagnose sys scanunit file-hash list

List malware hashes.

diagnose sys scanunit file-hash list

diagnose sys scanunit file-hash list all

List all malware hashes.

diagnose sys scanunit file-hash list all

diagnose sys scanunit file-hash list md5

List md5 malware hashes.

diagnose sys scanunit file-hash list md5

diagnose sys scanunit file-hash list sha1

List sha1 malware hashes.

diagnose sys scanunit file-hash list sha1

diagnose sys scanunit file-hash list sha256

List sha256 malware hashes.

diagnose sys scanunit file-hash list sha256

diagnose sys scanunit file-hash query

Query a malware hash.

diagnose sys scanunit file-hash query

diagnose sys scanunit file-hash query md5

Query an md5 malware hash.

diagnose sys scanunit file-hash query md5 <value>

Parameter

Description

Type

Size

<value>

md5 hash

string

diagnose sys scanunit file-hash query sha1

Query a sha1 malware hash.

diagnose sys scanunit file-hash query sha1 <value>

Parameter

Description

Type

Size

<value>

sha1 hash

string

diagnose sys scanunit file-hash query sha256

Query a sha256 malware hash.

diagnose sys scanunit file-hash query sha256 <value>

Parameter

Description

Type

Size

<value>

sha256 hash

string

diagnose sys scanunit file-hash status

File hash database status.

diagnose sys scanunit file-hash status

diagnose sys scanunit filter

Diagnostics filter.

diagnose sys scanunit filter

diagnose sys scanunit filter clear

Clear the current filter.

diagnose sys scanunit filter clear

diagnose sys scanunit filter list

Display the current filter.

diagnose sys scanunit filter list

diagnose sys scanunit filter negate

Negate the specified filter parameter.

diagnose sys scanunit filter negate

diagnose sys scanunit filter negate vd

Negate virtual domain.

diagnose sys scanunit filter negate vd

diagnose sys scanunit filter negate worker

Negate worker ID.

diagnose sys scanunit filter negate worker

diagnose sys scanunit filter vd

Index of virtual domain. -1 matches all.

diagnose sys scanunit filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys scanunit filter worker

ID of worker or "m" for manager. Invalid ID matches all.

diagnose sys scanunit filter worker <id>

Parameter

Description

Type

Size

<id>

ID of worker or "m" for manager. Invalid ID matches all.

string

diagnose sys scanunit log

Logging diagnostics.

diagnose sys scanunit log

diagnose sys scanunit log filter

Debug log filter.

diagnose sys scanunit log filter

diagnose sys scanunit log filter clear

Clear the current filter.

diagnose sys scanunit log filter clear

diagnose sys scanunit log filter list

Display the current filter.

diagnose sys scanunit log filter list

diagnose sys scanunit log filter negate

Negate the specified filter parameter.

diagnose sys scanunit log filter negate

diagnose sys scanunit log filter negate vd

Negate virtual domain.

diagnose sys scanunit log filter negate vd

diagnose sys scanunit log filter negate worker

Negate worker ID.

diagnose sys scanunit log filter negate worker

diagnose sys scanunit log filter vd

Index of virtual domain. -1 matches all.

diagnose sys scanunit log filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys scanunit log filter worker

ID of worker or "m" for manager. Invalid ID matches all.

diagnose sys scanunit log filter worker <id>

Parameter

Description

Type

Size

<id>

ID of worker or "m" for manager. Invalid ID matches all.

string

diagnose sys scanunit memory

Memory configuration

diagnose sys scanunit memory

diagnose sys scanunit memory conserve

Enter/exit conserve mode.

diagnose sys scanunit memory conserve

diagnose sys scanunit memory conserve enter

Enter conserve mode.

diagnose sys scanunit memory conserve enter

diagnose sys scanunit memory conserve exit

Exit conserve mode.

diagnose sys scanunit memory conserve exit

diagnose sys scanunit reload-avdb

Reload AVDB.

diagnose sys scanunit reload-avdb

diagnose sys scanunit reload-aveng

Reload AV engine.

diagnose sys scanunit reload-aveng

diagnose sys scanunit reload-fsa-ext

Reload FSA extensions list.

diagnose sys scanunit reload-fsa-ext

diagnose sys scanunit restart

Restart scanunit.

diagnose sys scanunit restart <which>

Parameter

Description

Type

Size

<which>

Worker id to restart. Or 'all' for all processes.

string

diagnose sys scanunit simulate-crash

Simulate scanunit crashes.

diagnose sys scanunit simulate-crash

diagnose sys scanunit simulate-crash lockup-workers

Simulate locked up scanunit workers.

diagnose sys scanunit simulate-crash lockup-workers

diagnose sys scanunit simulate-crash lockup-workers all

Lock up all workers.

diagnose sys scanunit simulate-crash lockup-workers all

diagnose sys scanunit simulate-crash lockup-workers worker

Lock up worker <id>.

diagnose sys scanunit simulate-crash lockup-workers worker <id>

Parameter

Description

Type

Size

<id>

ID of worker to lock up.

string

diagnose sys scanunit simulate-error

Simulate scanunit errors.

diagnose sys scanunit simulate-error

diagnose sys scanunit simulate-error av-engine-delay

Add delay in AV engine filetype callback

diagnose sys scanunit simulate-error av-engine-delay <Integer>

Parameter

Description

Type

Size

<Integer>

Delay (in seconds) to introduce in AV engine filetype callback

string

diagnose sys scanunit simulate-error av-error

Simulate AV engine error codes

diagnose sys scanunit simulate-error av-error <Integer>

Parameter

Description

Type

Size

<Integer>

AV engine error code, interpreted as bitmask.

string

diagnose sys scanunit simulate-error av-status

Simulate AV engine status codes.

diagnose sys scanunit simulate-error av-status <Integer>

Parameter

Description

Type

Size

<Integer>

AV engine status code. (-1 == INFECTED_ERROR, 1 == INFECTED_VIRUS, etc.)

string

diagnose sys scanunit simulate-error cdr-error

Simulate CDR engine internal error when active content detected.

diagnose sys scanunit simulate-error cdr-error

diagnose sys scanunit simulate-error reset

Reset all error simulation settings.

diagnose sys scanunit simulate-error reset

diagnose sys scanunit simulate-error scan-error-code

Simulate scanunit scan error.

diagnose sys scanunit simulate-error scan-error-code <Integer>

Parameter

Description

Type

Size

<Integer>

Scanunit error code (negated) (e.g., 0 = none, 3 = invalid infection pointer, 5 = scanunit crash).

string

diagnose sys scanunit simulate-error status

Show error simulation settings.

diagnose sys scanunit simulate-error status

diagnose sys scanunit stats

Statistics.

diagnose sys scanunit stats

diagnose sys scanunit stats all

Per-process statistics.

diagnose sys scanunit stats all

diagnose sys scanunit stats clear

Clear all statistics.

diagnose sys scanunit stats clear

diagnose sys scanunit stats crash

Crash process statistics.

diagnose sys scanunit stats crash

diagnose sys scanunit stats forker

scanunit forker statistics.

diagnose sys scanunit stats forker

diagnose sys scanunit stats list

List statistics.

diagnose sys scanunit stats list

diagnose sys scanunit stats manager

scanunit manager statistics.

diagnose sys scanunit stats manager

diagnose sys scanunit stats worker

scanunit worker statistics.

diagnose sys scanunit stats worker

diagnose sys scanunit valgrind

Valgrind analysis.

diagnose sys scanunit valgrind

diagnose sys scanunit valgrind disable

Force daemon to restart.

diagnose sys scanunit valgrind disable

diagnose sys scanunit valgrind enable

Force daemon to restart.

diagnose sys scanunit valgrind enable

diagnose sys scanunit valgrind log

Valgrind logs.

diagnose sys scanunit valgrind log

diagnose sys scanunit valgrind log clear

Clear logs.

diagnose sys scanunit valgrind log clear

diagnose sys scanunit valgrind log show

Show logs.

diagnose sys scanunit valgrind log show

diagnose sys scanunit valgrind memcheck

Force daemon to restart.

diagnose sys scanunit valgrind memcheck

diagnose sys scanunit valgrind memcheck_less

Force daemon to restart.

diagnose sys scanunit valgrind memcheck_less

diagnose sys scanunit valgrind status

Show valgrind status.

diagnose sys scanunit valgrind status

diagnose sys scanunit vdom-stats

Current VDOM statistics.

diagnose sys scanunit vdom-stats

diagnose sys scanunit vdom-stats all

List all VDOM statistics.

diagnose sys scanunit vdom-stats all

diagnose sys scanunit vdom-stats clear

Clear current VDOM statistics.

diagnose sys scanunit vdom-stats clear

diagnose sys scanunit vdom-stats clear-all

Clear all VDOM statistics.

diagnose sys scanunit vdom-stats clear-all

diagnose sys scanunit vdom-stats list

List current VDOM statistics.

diagnose sys scanunit vdom-stats list

diagnose sys scanunit watchdog-override

Configure scanunit manager watchdog override.

diagnose sys scanunit watchdog-override

diagnose sys scanunit watchdog-override disable

Disable watchdog override.

diagnose sys scanunit watchdog-override disable

diagnose sys scanunit watchdog-override enable

Enable watchdog override.

diagnose sys scanunit watchdog-override enable

diagnose sys scanunit watchdog-override interval

Set watchdog override interval.

diagnose sys scanunit watchdog-override interval <time>

Parameter

Description

Type

Size

<time>

Override interval (sec) for worker watchdog.

string

diagnose sys sccp-proxy

SCCP proxy diagnostics.

diagnose sys sccp-proxy

diagnose sys sccp-proxy debug-console

Debug consoles.

diagnose sys sccp-proxy debug-console

diagnose sys sccp-proxy phone

SCCP phones.

diagnose sys sccp-proxy phone

diagnose sys sccp-proxy phone list

List SCCP phones.

diagnose sys sccp-proxy phone list

diagnose sys sccp-proxy redirect

Redirects

diagnose sys sccp-proxy redirect

diagnose sys sccp-proxy redirect list

List SIP redirects.

diagnose sys sccp-proxy redirect list

diagnose sys sccp-proxy restart

Restart SIP and SCCP.

diagnose sys sccp-proxy restart

diagnose sys sccp-proxy stats

SCCP statistics.

diagnose sys sccp-proxy stats

diagnose sys sccp-proxy stats clear

Clear SCCP statistics.

diagnose sys sccp-proxy stats clear

diagnose sys sccp-proxy stats list

List SCCP statistics.

diagnose sys sccp-proxy stats list

diagnose sys sccp-proxy stats mem

Memory usage.

diagnose sys sccp-proxy stats mem

diagnose sys sccp-proxy stats mem full

Memory usage details.

diagnose sys sccp-proxy stats mem full

diagnose sys sccp-proxy stats mem summary

Memory usage summary.

diagnose sys sccp-proxy stats mem summary

diagnose sys sccp-proxy stats proto

SCCP proxy general protocol statistics summary.

diagnose sys sccp-proxy stats proto

diagnose sys sccp-proxy valgrind

Valgrind analysis.

diagnose sys sccp-proxy valgrind

diagnose sys sccp-proxy valgrind disable

Force daemon to restart.

diagnose sys sccp-proxy valgrind disable

diagnose sys sccp-proxy valgrind enable

Force daemon to restart.

diagnose sys sccp-proxy valgrind enable

diagnose sys sccp-proxy valgrind log

Valgrind logs.

diagnose sys sccp-proxy valgrind log

diagnose sys sccp-proxy valgrind log clear

Clear logs.

diagnose sys sccp-proxy valgrind log clear

diagnose sys sccp-proxy valgrind log show

Show logs.

diagnose sys sccp-proxy valgrind log show

diagnose sys sccp-proxy valgrind memcheck

Force daemon to restart.

diagnose sys sccp-proxy valgrind memcheck

diagnose sys sccp-proxy valgrind memcheck_less

Force daemon to restart.

diagnose sys sccp-proxy valgrind memcheck_less

diagnose sys sccp-proxy valgrind status

Show valgrind status.

diagnose sys sccp-proxy valgrind status

diagnose sys sdn

SDN Connector diagnostics.

diagnose sys sdn

diagnose sys sdn cache

Show SDN Connector cache.

diagnose sys sdn cache <sdn-data-type> <sdn-connector-name>

Parameter

Description

Type

Size

<sdn-data-type>

Specify the data type of the SDN Connector: address/service.

string

<sdn-connector-name>

Specify the name of the SDN connector.

string

diagnose sys sdn status

Show SDN Connector status.

diagnose sys sdn status <sdn-connector-name> <server-ip-address>

Parameter

Description

Type

Size

<sdn-connector-name>

Specify the name of the SDN Connector.

string

<server-ip-address>

Specify the IP address of the SDN connector.

string

diagnose sys sdwan

SD-WAN.

diagnose sys sdwan

diagnose sys sdwan advpn

Show health check info of advpn in SD-WAN.

diagnose sys sdwan advpn <num-info>

Parameter

Description

Type

Size

<num-info>

num of SDWAN members.

string

diagnose sys sdwan advpn-session

Show advpn session info.

diagnose sys sdwan advpn-session

diagnose sys sdwan health-check

Health Check.

diagnose sys sdwan health-check

diagnose sys sdwan health-check filter

Filter health-check

diagnose sys sdwan health-check filter

diagnose sys sdwan health-check filter clear

Clear all filters.

diagnose sys sdwan health-check filter clear

diagnose sys sdwan health-check filter member

Member sequence numbers <seq>.

diagnose sys sdwan health-check filter member <member>

Parameter

Description

Type

Size

<member>

Member sequence numbers.

string

diagnose sys sdwan health-check filter name

Health Check names <name>.

diagnose sys sdwan health-check filter name <name>

Parameter

Description

Type

Size

<name>

Health Check name.

string

diagnose sys sdwan health-check remote

Remote health check.

diagnose sys sdwan health-check remote <name> <seq-num>

Parameter

Description

Type

Size

<name>

Show status of the remote health check.

string

<seq-num>

Sequence number of the member.

string

diagnose sys sdwan health-check status

Health Check Status.

diagnose sys sdwan health-check status <name>

Parameter

Description

Type

Size

<name>

Show running status of the health check in SD-WAN.

string

diagnose sys sdwan internet-service-app-ctrl-3t-set

Set application control Internet Service 3T Info: ctrl-app-id, IP address, protocol & port

diagnose sys sdwan internet-service-app-ctrl-3t-set <ctrl-app-id> <ip> <proto> <port>

Parameter

Description

Type

Size

<ctrl-app-id>

ctrl app id

string

<ip>

Service IP address.

string

<proto>

Service protocol(0-255) for instance: tcp is 6

string

<port>

Service port(0-65535).

string

diagnose sys sdwan internet-service-app-ctrl-3t-unset

Unset application control Internet Service 3T Info: ctrl-app-id, IP address, protocol & port

diagnose sys sdwan internet-service-app-ctrl-3t-unset <ctrl-app-id> <ip> <proto> <port>

Parameter

Description

Type

Size

<ctrl-app-id>

ctrl app id

string

<ip>

Service IP address.

string

<proto>

Service protocol(0-255) for instance: tcp is 6

string

<port>

Service port(0-65535).

string

diagnose sys sdwan internet-service-app-ctrl-flush

Flush application control Internet Service.

diagnose sys sdwan internet-service-app-ctrl-flush

diagnose sys sdwan internet-service-app-ctrl-list

Show application control Internet Service ID list.

diagnose sys sdwan internet-service-app-ctrl-list

diagnose sys sdwan internet-service-app-ctrl-list app-id

Show application control Internet Service ID info of one given application id.

diagnose sys sdwan internet-service-app-ctrl-list app-id <app-id>

Parameter

Description

Type

Size

<app-id>

application control id.

string

diagnose sys sdwan internet-service-app-ctrl-list cat-id

Show application control Internet Service ID info of one given application category id.

diagnose sys sdwan internet-service-app-ctrl-list cat-id <cat-id>

Parameter

Description

Type

Size

<cat-id>

application category id.

string

diagnose sys sdwan internet-service-app-ctrl6-3t-set

Set application control6 Internet Service 3T Info: ctrl-app-id, IP address, protocol & port

diagnose sys sdwan internet-service-app-ctrl6-3t-set <ctrl-app-id> <ip> <proto> <port>

Parameter

Description

Type

Size

<ctrl-app-id>

ctrl app id

string

<ip>

Service IP address(Ipv6).

string

<proto>

Service protocol(0-255) for instance: tcp is 6

string

<port>

Service port(0-65535).

string

diagnose sys sdwan internet-service-app-ctrl6-3t-unset

Unset application control6 Internet Service 3T Info: ctrl-app-id, IP address, protocol & port

diagnose sys sdwan internet-service-app-ctrl6-3t-unset <ctrl-app-id> <ip> <proto> <port>

Parameter

Description

Type

Size

<ctrl-app-id>

ctrl app id

string

<ip>

Service IP address(Ipv6).

string

<proto>

Service protocol(0-255) for instance: tcp is 6

string

<port>

Service port(0-65535).

string

diagnose sys sdwan internet-service-app-ctrl6-flush

Flush application control Internet Service6.

diagnose sys sdwan internet-service-app-ctrl6-flush

diagnose sys sdwan internet-service6-app-ctrl-list

Show application control Internet Service6 ID list.

diagnose sys sdwan internet-service6-app-ctrl-list

diagnose sys sdwan internet-service6-app-ctrl-list app-id

Show application control Internet Service6 ID info of one given application id.

diagnose sys sdwan internet-service6-app-ctrl-list app-id <app-id>

Parameter

Description

Type

Size

<app-id>

application control id.

string

diagnose sys sdwan internet-service6-app-ctrl-list cat-id

Show application control Internet Service6 ID info of one given application category id.

diagnose sys sdwan internet-service6-app-ctrl-list cat-id <cat-id>

Parameter

Description

Type

Size

<cat-id>

application category id.

string

diagnose sys sdwan intf-sla-log

Show details of interface quality information.

diagnose sys sdwan intf-sla-log <name>

Parameter

Description

Type

Size

<name>

Interface name.

string

diagnose sys sdwan log

Log.

diagnose sys sdwan log <service-id>

Parameter

Description

Type

Size

<service-id>

Show details of traffic log on service in SD-WAN.

string

diagnose sys sdwan member

Member.

diagnose sys sdwan member <seq-num>

Parameter

Description

Type

Size

<seq-num>

Show details of member in SD-WAN.

string

diagnose sys sdwan neighbor

Neighbor.

diagnose sys sdwan neighbor <name>

Parameter

Description

Type

Size

<name>

Show running status of the neighbor in SD-WAN.

string

diagnose sys sdwan reset

Reset SD-WAN.

diagnose sys sdwan reset

diagnose sys sdwan route

Dump SD-WAN routes.

diagnose sys sdwan route <seq-num>

Parameter

Description

Type

Size

<seq-num>

Show details of SD-WAN routes.

string

diagnose sys sdwan route6

Dump IPv6 SD-WAN routes.

diagnose sys sdwan route6 <seq-num>

Parameter

Description

Type

Size

<seq-num>

Show details of IPv6 SD-WAN routes.

string

diagnose sys sdwan service4

IPv4 Service.

diagnose sys sdwan service4 <id>

Parameter

Description

Type

Size

<id>

Show details of IPv4 service in SD-WAN.

string

diagnose sys sdwan service6

IPv6 Service.

diagnose sys sdwan service6 <id>

Parameter

Description

Type

Size

<id>

Show details of IPv6 service in SD-WAN.

string

diagnose sys sdwan sla-log

Show details of health-check quality information in last 10 minutes

diagnose sys sdwan sla-log <name> <seq-num> <childname>

Parameter

Description

Type

Size

<name>

Health check name.

string

<seq-num>

Sequence number of the member.

string

<childname>

Child interface name.

string

diagnose sys sdwan zone

Dump sdwan zone info in kernel.

diagnose sys sdwan zone

diagnose sys server-probe

Server probe.

diagnose sys server-probe

diagnose sys server-probe response

Probe response.

diagnose sys server-probe response

diagnose sys service-communication

Show historical statistics for communication with FortiGuard services.

diagnose sys service-communication

diagnose sys session

IPv4 session.

diagnose sys session

diagnose sys session clear

Clear the sessions defined by filter.

diagnose sys session clear

diagnose sys session exp-stat

Expectation session statistics.

diagnose sys session exp-stat

diagnose sys session filter

List session with filters.

diagnose sys session filter

diagnose sys session filter clear

Clear session filter.

diagnose sys session filter clear

diagnose sys session filter clear dintf

Clear destination interface filter.

diagnose sys session filter clear dintf

diagnose sys session filter clear dport

Clear destination port filter.

diagnose sys session filter clear dport

diagnose sys session filter clear dst

Clear destination IP filter.

diagnose sys session filter clear dst

diagnose sys session filter clear duration

Clear duration filter.

diagnose sys session filter clear duration

diagnose sys session filter clear expire

Clear expire filter.

diagnose sys session filter clear expire

diagnose sys session filter clear nport

clear NAT'd source port filter

diagnose sys session filter clear nport

diagnose sys session filter clear nsrc

clear NAT'd source IP filter

diagnose sys session filter clear nsrc

diagnose sys session filter clear policy

Clear policy ID filter.

diagnose sys session filter clear policy

diagnose sys session filter clear proto

Clear protocol filter.

diagnose sys session filter clear proto

diagnose sys session filter clear proto-state

Clear protocol state filter.

diagnose sys session filter clear proto-state

diagnose sys session filter clear session-state1

Clear session-state1 filter.

diagnose sys session filter clear session-state1

diagnose sys session filter clear session-state2

Clear session-state2 filter.

diagnose sys session filter clear session-state2

diagnose sys session filter clear sintf

Clear source interface filter.

diagnose sys session filter clear sintf

diagnose sys session filter clear sport

Clear source port filter.

diagnose sys session filter clear sport

diagnose sys session filter clear src

Clear source IP filter.

diagnose sys session filter clear src

diagnose sys session filter clear vd

Clear virtual domain filter.

diagnose sys session filter clear vd

diagnose sys session filter dintf

Destination interface.

diagnose sys session filter dintf <xxxx>

Parameter

Description

Type

Size

<xxxx>

Interface name.

string

diagnose sys session filter dport

Destination port.

diagnose sys session filter dport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session filter dst

Destination IP address.

diagnose sys session filter dst <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP (from).

string

<xxx.xxx.xxx.xxx>

Destination IP (to).

string

diagnose sys session filter duration

duration

diagnose sys session filter duration <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Duration (from).

string

<xxx>

Duration (to).

string

diagnose sys session filter expire

expire

diagnose sys session filter expire <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Expire (from).

string

<xxx>

Expire (to).

string

diagnose sys session filter ext-dst

Add a destination address to the extended match list.

diagnose sys session filter ext-dst <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP.

string

diagnose sys session filter ext-dst-negate

Add a destination address to the negated extended match list.

diagnose sys session filter ext-dst-negate <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP.

string

diagnose sys session filter ext-src

Add a source address to the extended match list.

diagnose sys session filter ext-src <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP.

string

diagnose sys session filter ext-src-negate

Add a source address to the negated extended match list.

diagnose sys session filter ext-src-negate <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP.

string

diagnose sys session filter negate

Inverse filter.

diagnose sys session filter negate

diagnose sys session filter negate dintf

Inverse destination interface.

diagnose sys session filter negate dintf

diagnose sys session filter negate dport

Inverse destination port.

diagnose sys session filter negate dport

diagnose sys session filter negate dst

Inverse destination IP.

diagnose sys session filter negate dst

diagnose sys session filter negate duration

Inverse duration.

diagnose sys session filter negate duration

diagnose sys session filter negate expire

Inverse expire.

diagnose sys session filter negate expire

diagnose sys session filter negate nport

inverse NAT'd source port

diagnose sys session filter negate nport

diagnose sys session filter negate nsrc

inverse NAT'd source IP

diagnose sys session filter negate nsrc

diagnose sys session filter negate policy

Inverse policy ID.

diagnose sys session filter negate policy

diagnose sys session filter negate proto

Inverse protocol.

diagnose sys session filter negate proto

diagnose sys session filter negate proto-state

Inverse protocol state.

diagnose sys session filter negate proto-state

diagnose sys session filter negate session-state1

Inverse session-state1.

diagnose sys session filter negate session-state1

diagnose sys session filter negate session-state2

Inverse session-state2.

diagnose sys session filter negate session-state2

diagnose sys session filter negate sintf

Inverse source interface.

diagnose sys session filter negate sintf

diagnose sys session filter negate sport

Inverse source port.

diagnose sys session filter negate sport

diagnose sys session filter negate src

Inverse source IP.

diagnose sys session filter negate src

diagnose sys session filter negate vd

Inverse virtual domain.

diagnose sys session filter negate vd

diagnose sys session filter nport

NAT'd source port

diagnose sys session filter nport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session filter nsrc

NAT'd source ip address

diagnose sys session filter nsrc <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

NAT'd source ip (from)

string

<xxx.xxx.xxx.xxx>

NAT'd source ip (to)

string

diagnose sys session filter policy

Policy ID.

diagnose sys session filter policy <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Policy ID (from).

string

<xxx>

Policy ID (to).

string

diagnose sys session filter proto

Protocol number.

diagnose sys session filter proto <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys session filter proto-state

Protocol state.

diagnose sys session filter proto-state <x> <x>

Parameter

Description

Type

Size

<x>

<0-9> (from). 0: ANY 1: TCP_S_ESTABLISHED, SCTP_S_ESTABLISHED 2: TCP_S_SYN_SENT, SCTP_S_CLOSED 3: TCP_S_SYN_RECV, SCTP_S_COOKIE_WAIT 4: TCP_S_FIN_WAIT, SCTP_S_COOKIE_ECHOED 5: TCP_S_TIME_WAIT, SCTP_S_SHUTDOWN_SENT 6: TCP_S_CLOSE, SCTP_S_SHUTDOWN_RECD 7: TCP_S_CLOSE_WAIT, SCTP_S_SHUTDOWN_ACK_SENT 8: TCP_S_LAST_ACK 9: TCP_S_LISTEN

string

<x>

<0-9> (to). 0: ANY 1: TCP_S_ESTABLISHED, SCTP_S_ESTABLISHED 2: TCP_S_SYN_SENT, SCTP_S_CLOSED 3: TCP_S_SYN_RECV, SCTP_S_COOKIE_WAIT 4: TCP_S_FIN_WAIT, SCTP_S_COOKIE_ECHOED 5: TCP_S_TIME_WAIT, SCTP_S_SHUTDOWN_SENT 6: TCP_S_CLOSE, SCTP_S_SHUTDOWN_RECD 7: TCP_S_CLOSE_WAIT, SCTP_S_SHUTDOWN_ACK_SENT 8: TCP_S_LAST_ACK 9: TCP_S_LISTEN

string

diagnose sys session filter session-state1

Session state1.

diagnose sys session filter session-state1 <x> <x>

Parameter

Description

Type

Size

<x>

<0-FFFFFFFF>, state bits.

string

<x>

<0-FFFFFFFF>, state bit mask.

string

diagnose sys session filter session-state2

Session state2.

diagnose sys session filter session-state2 <x> <x>

Parameter

Description

Type

Size

<x>

<0-FFFFFFFF>, state bits.

string

<x>

<0-FFFFFFFF>, state bit mask.

string

diagnose sys session filter sintf

Source interface.

diagnose sys session filter sintf <xxxx>

Parameter

Description

Type

Size

<xxxx>

Interface name.

string

diagnose sys session filter sport

Source port.

diagnose sys session filter sport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session filter src

Source IP address.

diagnose sys session filter src <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP (from).

string

<xxx.xxx.xxx.xxx>

Source IP (to).

string

diagnose sys session filter vd

Index of virtual domain. -1 matches all.

diagnose sys session filter vd <xxx>

Parameter

Description

Type

Size

<xxx>

Index of virtual domain. -1 matches all.

string

diagnose sys session filter vd-name

Name of virtual domain. -1 or "any" matches all.

diagnose sys session filter vd-name <...>

Parameter

Description

Type

Size

<...>

Name of virtual domain. -1 or "any" matches all.

string

diagnose sys session full-stat

Fully stat session.

diagnose sys session full-stat

diagnose sys session help

Session help.

diagnose sys session help

diagnose sys session help add

Add session help.

diagnose sys session help add <name> <protocol> <port>

Parameter

Description

Type

Size

<name>

Help name.

string

<protocol>

Protocol number.

string

<port>

Help port.

string

diagnose sys session help delete

Delete session help.

diagnose sys session help delete <protocol> <port>

Parameter

Description

Type

Size

<protocol>

Protocol number.

string

<port>

Help port.

string

diagnose sys session help list

List session help.

diagnose sys session help list

diagnose sys session list

List session.

diagnose sys session list

diagnose sys session list expectation

List expectation session.

diagnose sys session list expectation

diagnose sys session stat

Stat session.

diagnose sys session stat

diagnose sys session sync

List session sync.

diagnose sys session sync

diagnose sys session sync reset

Reset session sync.

diagnose sys session sync reset

diagnose sys session ttl

TTL session.

diagnose sys session ttl

diagnose sys session6

IPv6 session.

diagnose sys session6

diagnose sys session6 clear

Clear IPv6 sessions defined by filter.

diagnose sys session6 clear

diagnose sys session6 exp-stat

Expectation session statistics.

diagnose sys session6 exp-stat

diagnose sys session6 filter

List IPv6 session with filters.

diagnose sys session6 filter

diagnose sys session6 filter clear

Clear IPv6 session filter.

diagnose sys session6 filter clear

diagnose sys session6 filter clear dintf

Clear destination interface filter.

diagnose sys session6 filter clear dintf

diagnose sys session6 filter clear dport

Clear destination port filter.

diagnose sys session6 filter clear dport

diagnose sys session6 filter clear dst

Clear destination IP filter.

diagnose sys session6 filter clear dst

diagnose sys session6 filter clear duration

Clear duration filter.

diagnose sys session6 filter clear duration

diagnose sys session6 filter clear expire

Clear expire filter.

diagnose sys session6 filter clear expire

diagnose sys session6 filter clear nport

Clear NAT'd source port filter.

diagnose sys session6 filter clear nport

diagnose sys session6 filter clear nsrc

Clear NAT'd source IP filter.

diagnose sys session6 filter clear nsrc

diagnose sys session6 filter clear policy

Clear policy ID filter.

diagnose sys session6 filter clear policy

diagnose sys session6 filter clear proto

Clear protocol filter.

diagnose sys session6 filter clear proto

diagnose sys session6 filter clear proto-state

Clear protocol state filter.

diagnose sys session6 filter clear proto-state

diagnose sys session6 filter clear session-state1

Clear session-state1 filter.

diagnose sys session6 filter clear session-state1

diagnose sys session6 filter clear session-state2

Clear session-state2 filter.

diagnose sys session6 filter clear session-state2

diagnose sys session6 filter clear sintf

Clear source interface filter.

diagnose sys session6 filter clear sintf

diagnose sys session6 filter clear sport

Clear source port filter.

diagnose sys session6 filter clear sport

diagnose sys session6 filter clear src

Clear source IP filter.

diagnose sys session6 filter clear src

diagnose sys session6 filter clear vd

Clear virtual domain filter.

diagnose sys session6 filter clear vd

diagnose sys session6 filter dintf

Destination interface.

diagnose sys session6 filter dintf <xxxxx>

Parameter

Description

Type

Size

<xxxxx>

Interface name.

string

diagnose sys session6 filter dport

Destination port.

diagnose sys session6 filter dport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session6 filter dst

Destination IP address.

diagnose sys session6 filter dst <xxx:xxx::xxx:xxx> <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Destination IP (from).

string

<xxx:xxx::xxx:xxx>

Destination IP (to).

string

diagnose sys session6 filter duration

duration

diagnose sys session6 filter duration <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Duration (from).

string

<xxx>

Duration (to).

string

diagnose sys session6 filter expire

expire

diagnose sys session6 filter expire <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Expire (from).

string

<xxx>

Expire (to).

string

diagnose sys session6 filter ext-dst

Add a destination address to the extended match list.

diagnose sys session6 filter ext-dst <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Destination IP.

string

diagnose sys session6 filter ext-dst-negate

Add a destination address to the negated extended match list.

diagnose sys session6 filter ext-dst-negate <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Destination IP.

string

diagnose sys session6 filter ext-src

Add a source address to the extended match list.

diagnose sys session6 filter ext-src <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Source IP.

string

diagnose sys session6 filter ext-src-negate

Add a source address to the negated extended match list.

diagnose sys session6 filter ext-src-negate <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Source IP.

string

diagnose sys session6 filter negate

Inverse filter.

diagnose sys session6 filter negate

diagnose sys session6 filter negate dintf

Inverse destination interface.

diagnose sys session6 filter negate dintf

diagnose sys session6 filter negate dport

Inverse destination port.

diagnose sys session6 filter negate dport

diagnose sys session6 filter negate dst

Inverse destination IP.

diagnose sys session6 filter negate dst

diagnose sys session6 filter negate duration

Inverse duration.

diagnose sys session6 filter negate duration

diagnose sys session6 filter negate expire

Inverse expire.

diagnose sys session6 filter negate expire

diagnose sys session6 filter negate nport

Inverse NAT'd source port.

diagnose sys session6 filter negate nport

diagnose sys session6 filter negate nsrc

Inverse NAT'd source IP.

diagnose sys session6 filter negate nsrc

diagnose sys session6 filter negate policy

Inverse policy ID.

diagnose sys session6 filter negate policy

diagnose sys session6 filter negate proto

Inverse protocol.

diagnose sys session6 filter negate proto

diagnose sys session6 filter negate proto-state

Inverse protocol state.

diagnose sys session6 filter negate proto-state

diagnose sys session6 filter negate session-state1

Inverse session-state1.

diagnose sys session6 filter negate session-state1

diagnose sys session6 filter negate session-state2

Inverse session-state2.

diagnose sys session6 filter negate session-state2

diagnose sys session6 filter negate sintf

Inverse source interface.

diagnose sys session6 filter negate sintf

diagnose sys session6 filter negate sport

Inverse source port.

diagnose sys session6 filter negate sport

diagnose sys session6 filter negate src

Inverse source IP.

diagnose sys session6 filter negate src

diagnose sys session6 filter negate vd

Inverse virtual domain.

diagnose sys session6 filter negate vd

diagnose sys session6 filter nport

NAT'd source port.

diagnose sys session6 filter nport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session6 filter nsrc

NAT'd source IP address.

diagnose sys session6 filter nsrc <xxx:xxx::xxx:xxx> <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

NAT'd source IP (from).

string

<xxx:xxx::xxx:xxx>

NAT'd Source IP (to).

string

diagnose sys session6 filter policy

Policy ID.

diagnose sys session6 filter policy <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Policy ID (from).

string

<xxx>

Policy ID (to).

string

diagnose sys session6 filter proto

Protocol number.

diagnose sys session6 filter proto <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys session6 filter proto-state

Protocol state.

diagnose sys session6 filter proto-state <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys session6 filter session-state1

Session state1.

diagnose sys session6 filter session-state1 <x> <x>

Parameter

Description

Type

Size

<x>

<0-FFFFFFFF>, state bits.

string

<x>

<0-FFFFFFFF>, state bit mask.

string

diagnose sys session6 filter session-state2

Session state2.

diagnose sys session6 filter session-state2 <x> <x>

Parameter

Description

Type

Size

<x>

<0-FFFFFFFF>, state bits.

string

<x>

<0-FFFFFFFF>, state bit mask.

string

diagnose sys session6 filter sintf

Source interface.

diagnose sys session6 filter sintf <xxxxx>

Parameter

Description

Type

Size

<xxxxx>

Interface name.

string

diagnose sys session6 filter sport

Source port.

diagnose sys session6 filter sport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session6 filter src

Source IP address.

diagnose sys session6 filter src <xxx:xxx::xxx:xxx> <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Source IP (from).

string

<xxx:xxx::xxx:xxx>

Source IP (to).

string

diagnose sys session6 filter vd

Index of virtual domain. -1 matches all.

diagnose sys session6 filter vd <xxx>

Parameter

Description

Type

Size

<xxx>

Index of virtual domain. -1 matches all.

string

diagnose sys session6 filter vd-name

name of virtual domain. -1 or "any" matches all.

diagnose sys session6 filter vd-name <...>

Parameter

Description

Type

Size

<...>

Name of virtual domain. -1 or "any" matches all.

string

diagnose sys session6 full-stat

Fully stat session.

diagnose sys session6 full-stat

diagnose sys session6 help

IPv6 session help.

diagnose sys session6 help

diagnose sys session6 help add

Add session help.

diagnose sys session6 help add <name> <protocol> <port>

Parameter

Description

Type

Size

<name>

Help name.

string

<protocol>

Protocol number.

string

<port>

Help port.

string

diagnose sys session6 help delete

Delete session help.

diagnose sys session6 help delete <protocol> <port>

Parameter

Description

Type

Size

<protocol>

Protocol number.

string

<port>

Help port.

string

diagnose sys session6 help list

List IPv6 session help.

diagnose sys session6 help list

diagnose sys session6 list

List IPv6 session.

diagnose sys session6 list

diagnose sys session6 list expectation

List IPv6 expectation session.

diagnose sys session6 list expectation

diagnose sys session6 stat

Stat session.

diagnose sys session6 stat

diagnose sys session6 sync

List session6 sync.

diagnose sys session6 sync

diagnose sys session6 sync reset

Reset session6 sync.

diagnose sys session6 sync reset

diagnose sys shmfile

shmfile related information.

diagnose sys shmfile

diagnose sys shmfile dump

dump.

diagnose sys shmfile dump

diagnose sys shmfile dump oid-app

oid-app information.

diagnose sys shmfile dump oid-app <path.name>

Parameter

Description

Type

Size

<path.name>

object's path.name.

string

diagnose sys shmfile dump oid-slab

oid-slab information.

diagnose sys shmfile dump oid-slab <path.object>

Parameter

Description

Type

Size

<path.object>

vdom root object's information.

string

diagnose sys shmfile dump slab-file

slab file information.

diagnose sys shmfile dump slab-file [file-id]

Parameter

Description

Type

Size

[file-id]

file id.

string

diagnose sys shmfile dump table-count

table count information.

diagnose sys shmfile dump table-count

diagnose sys shmfile dump table-count total

total table count information.

diagnose sys shmfile dump table-count total <path.name>

Parameter

Description

Type

Size

<path.name>

object's path.name (e.g. system.interface).

string

diagnose sys shmfile dump table-count vdom

vdom table count information.

diagnose sys shmfile dump table-count vdom <vdom-name> <path.name>

Parameter

Description

Type

Size

<vdom-name>

vdom name.

string

<path.name>

object's path.name (e.g. system.interface).

string

diagnose sys shmfile dump vdom

vdom information.

diagnose sys shmfile dump vdom <vdom-name>

Parameter

Description

Type

Size

<vdom-name>

vdom name.

string

diagnose sys sip

SIP diagnostics.

diagnose sys sip

diagnose sys sip debug-mask

Mask for SIP kernel trace.

diagnose sys sip debug-mask <mask>

Parameter

Description

Type

Size

<mask>

For example, 0, 1, 2, 3 ...

string

diagnose sys sip dialog

SIP dialog.

diagnose sys sip dialog

diagnose sys sip dialog clear

Clear SIP dialogs.

diagnose sys sip dialog clear

diagnose sys sip dialog list

List SIP dialogs.

diagnose sys sip dialog list

diagnose sys sip mapping

SIP mapping.

diagnose sys sip mapping

diagnose sys sip mapping list

List SIP mappings.

diagnose sys sip mapping list

diagnose sys sip status

Display SIP status.

diagnose sys sip status

diagnose sys sip-proxy

SIP proxy diagnostics.

diagnose sys sip-proxy

diagnose sys sip-proxy alg

SIP to ALG passing.

diagnose sys sip-proxy alg

diagnose sys sip-proxy alg bypass

Pass SIP to ALG but pass it directly through without parsing.

diagnose sys sip-proxy alg bypass

diagnose sys sip-proxy alg parse-only

Pass SIP to ALG and parse but do not modify.

diagnose sys sip-proxy alg parse-only

diagnose sys sip-proxy calls

SIP calls.

diagnose sys sip-proxy calls

diagnose sys sip-proxy calls clear

Clear all active SIP calls.

diagnose sys sip-proxy calls clear

diagnose sys sip-proxy calls idle

List idle SIP calls.

diagnose sys sip-proxy calls idle

diagnose sys sip-proxy calls invite

List SIP invite transactions.

diagnose sys sip-proxy calls invite

diagnose sys sip-proxy calls list

List active SIP calls.

diagnose sys sip-proxy calls list

diagnose sys sip-proxy config

Configuration details.

diagnose sys sip-proxy config

diagnose sys sip-proxy config list

Display SIP per-policy configurations.

diagnose sys sip-proxy config list

diagnose sys sip-proxy config profiles

Display SIP VoIP profiles.

diagnose sys sip-proxy config profiles

diagnose sys sip-proxy debug-console

Debug consoles.

diagnose sys sip-proxy debug-console

diagnose sys sip-proxy filter

Filter for listing meters and calls.

diagnose sys sip-proxy filter

diagnose sys sip-proxy filter clear

Erase the current filter.

diagnose sys sip-proxy filter clear

diagnose sys sip-proxy filter dst-addr4

Destination address range to filter by.

diagnose sys sip-proxy filter dst-addr4 <ipv4-address> <ipv4-address>

Parameter

Description

Type

Size

<ipv4-address>

Destination IPv4 address (from).

string

<ipv4-address>

Destination IPv4 address (to).

string

diagnose sys sip-proxy filter dst-addr6

IPv6 destination address range to filter by.

diagnose sys sip-proxy filter dst-addr6 <ipv6-address> <ipv6-address>

Parameter

Description

Type

Size

<ipv6-address>

Destination IPv6 address (from).

string

<ipv6-address>

Destination IPv6 address (to).

string

diagnose sys sip-proxy filter dst-port

Destination port to filter by.

diagnose sys sip-proxy filter dst-port <port>

Parameter

Description

Type

Size

<port>

Source port.

string

diagnose sys sip-proxy filter list

Display the current filter.

diagnose sys sip-proxy filter list

diagnose sys sip-proxy filter negate

Negate the specified filter parameter.

diagnose sys sip-proxy filter negate

diagnose sys sip-proxy filter negate dst-addr4

Negate the dst-addr4 filter.

diagnose sys sip-proxy filter negate dst-addr4

diagnose sys sip-proxy filter negate dst-addr6

Negate the dst-addr6 filter.

diagnose sys sip-proxy filter negate dst-addr6

diagnose sys sip-proxy filter negate dst-port

Negate the dst-port filter.

diagnose sys sip-proxy filter negate dst-port

diagnose sys sip-proxy filter negate policy

Negate the policy filter.

diagnose sys sip-proxy filter negate policy

diagnose sys sip-proxy filter negate policy-type

Negate the policy-type filter.

diagnose sys sip-proxy filter negate policy-type

diagnose sys sip-proxy filter negate src-addr4

Negate the src-addr4 filter.

diagnose sys sip-proxy filter negate src-addr4

diagnose sys sip-proxy filter negate src-addr6

Negate the src-addr6 filter.

diagnose sys sip-proxy filter negate src-addr6

diagnose sys sip-proxy filter negate src-port

Negate the src-port filter.

diagnose sys sip-proxy filter negate src-port

diagnose sys sip-proxy filter negate vd

Negate the virtual domain filter.

diagnose sys sip-proxy filter negate vd

diagnose sys sip-proxy filter negate voip-profile

Negate the VoIP-profile filter.

diagnose sys sip-proxy filter negate voip-profile

diagnose sys sip-proxy filter policy

Policy to filter by.

diagnose sys sip-proxy filter policy <policy>

Parameter

Description

Type

Size

<policy>

policy

string

diagnose sys sip-proxy filter policy-type

Policy-type to filter by.

diagnose sys sip-proxy filter policy-type

diagnose sys sip-proxy filter policy-type ipv4

Filter IPv4 policies.

diagnose sys sip-proxy filter policy-type ipv4

diagnose sys sip-proxy filter policy-type ipv6

Filter IPv6 policies.

diagnose sys sip-proxy filter policy-type ipv6

diagnose sys sip-proxy filter src-addr4

Source address range to filter by.

diagnose sys sip-proxy filter src-addr4 <ipv4-address> <ipv4-address>

Parameter

Description

Type

Size

<ipv4-address>

Source IPv4 address (from).

string

<ipv4-address>

Source IPv4 address (to).

string

diagnose sys sip-proxy filter src-addr6

IPv6 source address range to filter by.

diagnose sys sip-proxy filter src-addr6 <ipv6-address> <ipv6-address>

Parameter

Description

Type

Size

<ipv6-address>

Source IPv6 address (from).

string

<ipv6-address>

Source IPv6 address (to).

string

diagnose sys sip-proxy filter src-port

Source port to filter by.

diagnose sys sip-proxy filter src-port <port>

Parameter

Description

Type

Size

<port>

Source port.

string

diagnose sys sip-proxy filter vd

Index of virtual domain. -1 matches all.

diagnose sys sip-proxy filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys sip-proxy filter voip-profile

VoIP profile to filter by.

diagnose sys sip-proxy filter voip-profile <voip-profile>

Parameter

Description

Type

Size

<voip-profile>

voip-profile

string

diagnose sys sip-proxy log-filter

SIP ALG debug log filter.

diagnose sys sip-proxy log-filter

diagnose sys sip-proxy log-filter clear

Clear the current filter.

diagnose sys sip-proxy log-filter clear

diagnose sys sip-proxy log-filter dst-addr4

IPv4 destination address range to filter by.

diagnose sys sip-proxy log-filter dst-addr4 <ip-address> <ip-address>

Parameter

Description

Type

Size

<ip-address>

Destination IPv4 address (from).

string

<ip-address>

Destination IPv4 address (to).

string

diagnose sys sip-proxy log-filter dst-addr6

IPv6 destination address range to filter by.

diagnose sys sip-proxy log-filter dst-addr6 <ipv6-address> <ipv6-address>

Parameter

Description

Type

Size

<ipv6-address>

Destination IPv6 address (from).

string

<ipv6-address>

Destination IPv6 address (to).

string

diagnose sys sip-proxy log-filter dst-port

Destination port to filter by.

diagnose sys sip-proxy log-filter dst-port <port>

Parameter

Description

Type

Size

<port>

Source port.

string

diagnose sys sip-proxy log-filter list

Display the current filter.

diagnose sys sip-proxy log-filter list

diagnose sys sip-proxy log-filter negate

Negate the specified filter parameter.

diagnose sys sip-proxy log-filter negate

diagnose sys sip-proxy log-filter negate dst-addr4

Negate the dst-addr4 filter.

diagnose sys sip-proxy log-filter negate dst-addr4

diagnose sys sip-proxy log-filter negate dst-addr6

Negate the dst-addr6 filter.

diagnose sys sip-proxy log-filter negate dst-addr6

diagnose sys sip-proxy log-filter negate dst-port

Negate the dst-port filter.

diagnose sys sip-proxy log-filter negate dst-port

diagnose sys sip-proxy log-filter negate policy

Negate the policy filter.

diagnose sys sip-proxy log-filter negate policy

diagnose sys sip-proxy log-filter negate policy-type

Negate the policy-type filter.

diagnose sys sip-proxy log-filter negate policy-type

diagnose sys sip-proxy log-filter negate src-addr4

Negate the src-addr4 filter.

diagnose sys sip-proxy log-filter negate src-addr4

diagnose sys sip-proxy log-filter negate src-addr6

Negate the src-addr6 filter.

diagnose sys sip-proxy log-filter negate src-addr6

diagnose sys sip-proxy log-filter negate src-port

Negate the src-port filter.

diagnose sys sip-proxy log-filter negate src-port

diagnose sys sip-proxy log-filter negate vd

Negate the virtual domain filter.

diagnose sys sip-proxy log-filter negate vd

diagnose sys sip-proxy log-filter negate voip-profile

Negate the VoIP-profile filter.

diagnose sys sip-proxy log-filter negate voip-profile

diagnose sys sip-proxy log-filter policy

Policy to filter by.

diagnose sys sip-proxy log-filter policy <policy>

Parameter

Description

Type

Size

<policy>

policy

string

diagnose sys sip-proxy log-filter policy-type

Policy-type to filter by.

diagnose sys sip-proxy log-filter policy-type

diagnose sys sip-proxy log-filter policy-type ipv4

Filter IPv4 policies.

diagnose sys sip-proxy log-filter policy-type ipv4

diagnose sys sip-proxy log-filter policy-type ipv6

Filter IPv6 policies.

diagnose sys sip-proxy log-filter policy-type ipv6

diagnose sys sip-proxy log-filter src-addr4

IPv4 source address range to filter by.

diagnose sys sip-proxy log-filter src-addr4 <ipv4-address> <ipv4-address>

Parameter

Description

Type

Size

<ipv4-address>

Source IPv4 address (from).

string

<ipv4-address>

Source IPv4 address (to).

string

diagnose sys sip-proxy log-filter src-addr6

IPv6 source address range to filter by.

diagnose sys sip-proxy log-filter src-addr6 <ipv6-address> <ipv6-address>

Parameter

Description

Type

Size

<ipv6-address>

Source IPv6 address (from).

string

<ipv6-address>

Source IPv6 address (to).

string

diagnose sys sip-proxy log-filter src-port

Source port to filter by.

diagnose sys sip-proxy log-filter src-port <port>

Parameter

Description

Type

Size

<port>

Source port.

string

diagnose sys sip-proxy log-filter vd

Index of virtual domain. -1 matches all.

diagnose sys sip-proxy log-filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys sip-proxy log-filter voip-profile

VoIP profile to filter by.

diagnose sys sip-proxy log-filter voip-profile <voip-profile>

Parameter

Description

Type

Size

<voip-profile>

voip-profile

string

diagnose sys sip-proxy meters

Diagnostics for SIP rate limiting meters.

diagnose sys sip-proxy meters

diagnose sys sip-proxy meters list

List active SIP rate limiting meters.

diagnose sys sip-proxy meters list

diagnose sys sip-proxy redirect

Redirects

diagnose sys sip-proxy redirect

diagnose sys sip-proxy redirect list

List SIP redirects.

diagnose sys sip-proxy redirect list

diagnose sys sip-proxy restart

Restart SIP and SCCP.

diagnose sys sip-proxy restart

diagnose sys sip-proxy scheduler-times

Scheduler times.

diagnose sys sip-proxy scheduler-times

diagnose sys sip-proxy scheduler-times display

Display scheduler times.

diagnose sys sip-proxy scheduler-times display

diagnose sys sip-proxy scheduler-times start

Start measuring scheduler times.

diagnose sys sip-proxy scheduler-times start

diagnose sys sip-proxy scheduler-times stop

Stop measuring scheduler times.

diagnose sys sip-proxy scheduler-times stop

diagnose sys sip-proxy session

SIP sessions.

diagnose sys sip-proxy session

diagnose sys sip-proxy session list

List SIP sessions.

diagnose sys sip-proxy session list

diagnose sys sip-proxy ssl

SSL hardware support.

diagnose sys sip-proxy ssl

diagnose sys sip-proxy ssl hardware

Enable SSL hardware support (default) (will restart voip).

diagnose sys sip-proxy ssl hardware

diagnose sys sip-proxy ssl software

Disable SSL hardware support (will restart voip).

diagnose sys sip-proxy ssl software

diagnose sys sip-proxy stats

SIP proxy statistics.

diagnose sys sip-proxy stats

diagnose sys sip-proxy stats call

SIP proxy call statistics summary.

diagnose sys sip-proxy stats call

diagnose sys sip-proxy stats clear

Clear SIP proxy activity statistics.

diagnose sys sip-proxy stats clear

diagnose sys sip-proxy stats ha

SIP proxy HA statistics summary.

diagnose sys sip-proxy stats ha

diagnose sys sip-proxy stats list

SIP proxy activity statistics.

diagnose sys sip-proxy stats list

diagnose sys sip-proxy stats mem

Memory usage.

diagnose sys sip-proxy stats mem

diagnose sys sip-proxy stats mem full

Memory usage details.

diagnose sys sip-proxy stats mem full

diagnose sys sip-proxy stats mem summary

Memory usage summary.

diagnose sys sip-proxy stats mem summary

diagnose sys sip-proxy stats proto

SIP proxy general protocol statistics summary.

diagnose sys sip-proxy stats proto

diagnose sys sip-proxy stats ssl-auth

SIP proxy SSL authentication statistics.

diagnose sys sip-proxy stats ssl-auth

diagnose sys sip-proxy stats udp

SIP proxy UDP statistics summary.

diagnose sys sip-proxy stats udp

diagnose sys sip-proxy valgrind

Valgrind analysis.

diagnose sys sip-proxy valgrind

diagnose sys sip-proxy valgrind disable

Force daemon to restart.

diagnose sys sip-proxy valgrind disable

diagnose sys sip-proxy valgrind enable

Force daemon to restart.

diagnose sys sip-proxy valgrind enable

diagnose sys sip-proxy valgrind log

Valgrind logs.

diagnose sys sip-proxy valgrind log

diagnose sys sip-proxy valgrind log clear

Clear logs.

diagnose sys sip-proxy valgrind log clear

diagnose sys sip-proxy valgrind log show

Show logs.

diagnose sys sip-proxy valgrind log show

diagnose sys sip-proxy valgrind memcheck

Force daemon to restart.

diagnose sys sip-proxy valgrind memcheck

diagnose sys sip-proxy valgrind memcheck_less

Force daemon to restart.

diagnose sys sip-proxy valgrind memcheck_less

diagnose sys sip-proxy valgrind status

Show valgrind status.

diagnose sys sip-proxy valgrind status

diagnose sys sip-proxy vdom

Diagnostics for VDOM in VoIP Daemon.

diagnose sys sip-proxy vdom

diagnose sys sip-proxy vdom list

List active VDOMs in VoIP daemon.

diagnose sys sip-proxy vdom list

diagnose sys sip-proxy vip

VIPs

diagnose sys sip-proxy vip

diagnose sys sip-proxy vip real-server

Real server VIP list.

diagnose sys sip-proxy vip real-server

diagnose sys smc-ntp

SMC NTP daemon command.

diagnose sys smc-ntp

diagnose sys smc-ntp status

List SMC NTP setting.

diagnose sys smc-ntp status

diagnose sys speedtest-server

speed test server.

diagnose sys speedtest-server

diagnose sys speedtest-server clients

Speed test clients.

diagnose sys speedtest-server clients

diagnose sys speedtest-server clients flush

Flush pending speed test clients.

diagnose sys speedtest-server clients flush

diagnose sys speedtest-server clients list

List pending speed test clients.

diagnose sys speedtest-server clients list

diagnose sys speedtest-server controller

Speed test controller

diagnose sys speedtest-server controller

diagnose sys speedtest-server controller add

Add a controller

diagnose sys speedtest-server controller add <interface>

Parameter

Description

Type

Size

<interface>

Name of the interface.

string

diagnose sys speedtest-server controller del

Delete a controller

diagnose sys speedtest-server controller del <interface>

Parameter

Description

Type

Size

<interface>

Name of the interface.

string

diagnose sys speedtest-server controller list

List controllers.

diagnose sys speedtest-server controller list <name>

Parameter

Description

Type

Size

<name>

Name of the controller.

string

diagnose sys speedtest-server log

Speed test result log.

diagnose sys speedtest-server log

diagnose sys speedtest-server log del-file

Delete log file.

diagnose sys speedtest-server log del-file

diagnose sys speedtest-server log list

List result log cache.

diagnose sys speedtest-server log list

diagnose sys speedtest-server log load-disk

Load log file to memory.

diagnose sys speedtest-server log load-disk

diagnose sys speedtest-server log save-disk

Save result logs to file.

diagnose sys speedtest-server log save-disk

diagnose sys speedtest-server speedtest-dbg

Toggle speed test debug output

diagnose sys speedtest-server speedtest-dbg

diagnose sys stp

STP diagnostics.

diagnose sys stp

diagnose sys stp bridge

Display STP details for one or more bridges.

diagnose sys stp bridge

diagnose sys stp bridge details

Display STP details for a bridge.

diagnose sys stp bridge details

diagnose sys stp bridge info

Display STP details for a bridge.

diagnose sys stp bridge info

diagnose sys stp bridge summary

Display STP summary for a bridge.

diagnose sys stp bridge summary

diagnose sys stp config

Display STP configuration.

diagnose sys stp config

diagnose sys stp debug

Debug log.

diagnose sys stp debug

diagnose sys stp debug filter

Show the filter for this console.

diagnose sys stp debug filter

diagnose sys stp debug filter bridge

Bridge name to match.

diagnose sys stp debug filter bridge

diagnose sys stp debug filter clear

Clear the filter.

diagnose sys stp debug filter clear

diagnose sys stp debug filter list

Show STP debug filter.

diagnose sys stp debug filter list

diagnose sys stp debug filter port

Port name to match.

diagnose sys stp debug filter port

diagnose sys stp debug start

Start logging STP debug on this console.

diagnose sys stp debug start

diagnose sys stp debug stop

Stop logging STP debug on this console.

diagnose sys stp debug stop

diagnose sys stp restart

Restart the STP process

diagnose sys stp restart

diagnose sys stp stats

Display statistics for all STP processes.

diagnose sys stp stats

diagnose sys stp stats config

Display statistics for the STP configuration handling process.

diagnose sys stp stats config

diagnose sys stp stats crash

Display statistics for the STP crash log generating process.

diagnose sys stp stats crash

diagnose sys stp stats debug

Display statistics for the STP debug log process.

diagnose sys stp stats debug

diagnose sys stp stats manager

Display statistics for the STP manager process.

diagnose sys stp stats manager

diagnose sys stp stats rxtx

Display statistics for the STP reception&transmission process.

diagnose sys stp stats rxtx

diagnose sys swnet

sw device

diagnose sys swnet

diagnose sys swnet list

list sw device

diagnose sys swnet list <name>

Parameter

Description

Type

Size

<name>

sw device name

string

diagnose sys tcp-auth-options

TCP auth options info.

diagnose sys tcp-auth-options

diagnose sys tcp-option

Enable/disable TCP option.

diagnose sys tcp-option

diagnose sys tcp-option disable

disable

diagnose sys tcp-option disable

diagnose sys tcp-option dump

Show TCP option status

diagnose sys tcp-option dump

diagnose sys tcp-option enable

enable

diagnose sys tcp-option enable

diagnose sys tcpsock

TCP sock info.

diagnose sys tcpsock

diagnose sys tcpsock6

TCP sock6 info.

diagnose sys tcpsock6

diagnose sys top

Show top processes information.

diagnose sys top <value> <Integer> <value>

Parameter

Description

Type

Size

<value>

Delay in seconds (default 5).

string

<Integer>

Maximum lines to display (default 20). Show all the running processes if larger than its total number.

string

<value>

Iterations to run (default unlimited).

string

diagnose sys top-all

Show top threads information.

diagnose sys top-all <value> <Integer> <value>

Parameter

Description

Type

Size

<value>

Delay in seconds (default 5).

string

<Integer>

Maximum lines to display (default 20). Show all the running threads if larger than its total number.

string

<value>

Iterations to run (default unlimited).

string

diagnose sys top-fd

Display processes with the most active file descriptors (default 5 processes).

diagnose sys top-fd [process-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

diagnose sys top-fd detail

Display per-process active fd info along with details (default 5 processes, 50 fds).

diagnose sys top-fd detail [process-count] [fd-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

[fd-count]

Number of FDs to include (per process, default 50).

string

diagnose sys top-mem

Display processes with the most used memory (default 5 processes).

diagnose sys top-mem [process-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

diagnose sys top-mem detail

Display per-process memory info along with details (default 5 processes).

diagnose sys top-mem detail [process-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

diagnose sys top-sockmem

Display processes with the most used socket memory (default 5 processes).

diagnose sys top-sockmem [process-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

diagnose sys traffic

Traffic information

diagnose sys traffic

diagnose sys traffic app-stats

Traffic application statistics.

diagnose sys traffic app-stats

diagnose sys traffic app-stats add

Add traffic application statistics entry.

diagnose sys traffic app-stats add <app_id>

Parameter

Description

Type

Size

<app_id>

A decimal number.

string

diagnose sys traffic app-stats del

Delete traffic application statistics entry.

diagnose sys traffic app-stats del <app_id>

Parameter

Description

Type

Size

<app_id>

A decimal number.

string

diagnose sys traffic app-stats hash-stats

Traffic application hash statistics.

diagnose sys traffic app-stats hash-stats

diagnose sys traffic app-stats list

List traffic application statistics entry.

diagnose sys traffic app-stats list <app_id>

Parameter

Description

Type

Size

<app_id>

A decimal number.

string

diagnose sys traffic statistics

Traffic statistics

diagnose sys traffic statistics

diagnose sys traffic statistics clear

Clear traffic stats.

diagnose sys traffic statistics clear

diagnose sys traffic statistics show

Show traffic stats.

diagnose sys traffic statistics show

diagnose sys traffic-priority

Traffic Priority (DSCP/TOS).

diagnose sys traffic-priority

diagnose sys traffic-priority list

List traffic priority settings.

diagnose sys traffic-priority list

diagnose sys udp-reserved-port

Reserved UDP ports.

diagnose sys udp-reserved-port

diagnose sys udp-reserved-port test

Test if port has been reserved.

diagnose sys udp-reserved-port test <port> [vdom]

Parameter

Description

Type

Size

<port>

UDP port that will be tested

string

[vdom]

VDOM name. If not specified, global reserved UDP ports will be used to test

string

diagnose sys udpsock

UDP sock info.

diagnose sys udpsock

diagnose sys udpsock6

UDP sock6 info.

diagnose sys udpsock6

diagnose sys uuid

UUID debug.

diagnose sys uuid

diagnose sys uuid allow-manual-set

Allow to set UUID manually.

diagnose sys uuid allow-manual-set

diagnose sys uuid allow-manual-set disable

Disable.

diagnose sys uuid allow-manual-set disable

diagnose sys uuid allow-manual-set enable

Enable.

diagnose sys uuid allow-manual-set enable

diagnose sys uuid generate

Generate a UUID.

diagnose sys uuid generate

diagnose sys var-zone

var-zone information.

diagnose sys var-zone

diagnose sys var-zone show

Show var-zone data.

diagnose sys var-zone show

diagnose sys vd

Virtual domain management.

diagnose sys vd

diagnose sys vd add

Add a Virtual System.

diagnose sys vd add <vdname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

diagnose sys vd delete

Delete a Virtual System.

diagnose sys vd delete <vdname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

diagnose sys vd list

List Virtual Domains.

diagnose sys vd list

diagnose sys vd set

Set current VDOM.

diagnose sys vd set <vdname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

diagnose sys vd stats

Show VDOM statistics.

diagnose sys vd stats

diagnose sys vdom-property

VDOM property information.

diagnose sys vdom-property

diagnose sys vlan

vlan

diagnose sys vlan

diagnose sys vlan list

List VLAN.

diagnose sys vlan list

diagnose sys vxlan

VXLAN diagnostics.

diagnose sys vxlan

diagnose sys vxlan device

VXLAN device.

diagnose sys vxlan device

diagnose sys vxlan device list

Display VXLAN devices.

diagnose sys vxlan device list

diagnose sys vxlan fdb

VXLAN forwarding DB.

diagnose sys vxlan fdb

diagnose sys vxlan fdb list

Display VXLAN forwarding DB.

diagnose sys vxlan fdb list <string>

Parameter

Description

Type

Size

<string>

Interface name.

string

diagnose sys vxlan fdb stat

Display VXLAN forwarding DB statistics.

diagnose sys vxlan fdb stat <string>

Parameter

Description

Type

Size

<string>

Interface name.

string

diagnose sys waninfo

Get WAN Information through FortiGuard.

diagnose sys waninfo

diagnose sys waninfo ipify

Get public IP through https://api.ipify.org.

diagnose sys waninfo ipify <ddd.ddd.ddd.ddd> or <interface name> <vdom>

Parameter

Description

Type

Size

<ddd.ddd.ddd.ddd> or <interface name>

Specify the source IPv4 address or interface name.

string

<vdom>

Specify the Virtual Domain name.

string

diagnose sys wccp

wccp

diagnose sys wccp

diagnose sys wccp delete

Delete one wccp service.

diagnose sys wccp delete <xxx>

Parameter

Description

Type

Size

<xxx>

Service ID.

string

diagnose sys wccp flush

Flush wccp services.

diagnose sys wccp flush

diagnose sys wccp list

List wccp services.

diagnose sys wccp list

diagnose sys wireless

wireless

diagnose sys wireless

diagnose sys wireless apdd

ap daemon debug, such as ap scan

diagnose sys wireless apdd <-c|-h> <value1> <value2> <value3>

Parameter

Description

Type

Size

<-c|-h>

Control plane or help.

string

<value1>

Value of command.

string

<value2>

Value of command.

string

<value3>

Value of command.

string

diagnose sys wireless iwconfig

iwconfig

diagnose sys wireless iwconfig <name> <cmd> <value1> <value2> <value3>

Parameter

Description

Type

Size

<name>

Interface name of wireless.

string

<cmd>

Command for wireless.

string

<value1>

Value of command.

string

<value2>

Value of command.

string

<value3>

Value of command.

string

diagnose sys wireless iwpriv

iwpriv

diagnose sys wireless iwpriv <name> <cmd> <value1> <value2> <value3>

Parameter

Description

Type

Size

<name>

Interface name of wireless.

string

<cmd>

Command for wireless.

string

<value1>

Value of command.

string

<value2>

Value of command.

string

<value3>

Value of command.

string

diagnose sys wireless listchan

list channels

diagnose sys wireless listchan

diagnose sys wireless stats

stats

diagnose sys wireless stats <name>

Parameter

Description

Type

Size

<name>

Interface name of wireless.

string

diagnose sys

diagnose sys

system

This topic includes the following commands:

diagnose sys 5g-modem

5G modem.

diagnose sys 5g-modem

diagnose sys 5g-modem data-session-info

5G Modem data session information

diagnose sys 5g-modem data-session-info

diagnose sys 5g-modem gps-info

5G Modem GPS information

diagnose sys 5g-modem gps-info

diagnose sys 5g-modem modem-details

5G Modem detailed information

diagnose sys 5g-modem modem-details

diagnose sys 5g-modem signal-info

5G Modem signal information

diagnose sys 5g-modem signal-info

diagnose sys 5g-modem sim-info

5G Modem SIM card information

diagnose sys 5g-modem sim-info

diagnose sys 5g-modem traffic-status

5G Modem traffic status

diagnose sys 5g-modem traffic-status

diagnose sys 802-1x

802.1X diagnostics.

diagnose sys 802-1x

diagnose sys 802-1x status

Display 802.1X port-based authentication status.

diagnose sys 802-1x status

diagnose sys 802-1x valgrind

Valgrind analysis.

diagnose sys 802-1x valgrind

diagnose sys 802-1x valgrind disable

Force daemon to restart.

diagnose sys 802-1x valgrind disable

diagnose sys 802-1x valgrind enable

Force daemon to restart.

diagnose sys 802-1x valgrind enable

diagnose sys 802-1x valgrind log

Valgrind logs.

diagnose sys 802-1x valgrind log

diagnose sys 802-1x valgrind log clear

Clear logs.

diagnose sys 802-1x valgrind log clear

diagnose sys 802-1x valgrind log show

Show logs.

diagnose sys 802-1x valgrind log show

diagnose sys 802-1x valgrind memcheck

Force daemon to restart.

diagnose sys 802-1x valgrind memcheck

diagnose sys 802-1x valgrind memcheck_less

Force daemon to restart.

diagnose sys 802-1x valgrind memcheck_less

diagnose sys 802-1x valgrind status

Show valgrind status.

diagnose sys 802-1x valgrind status

diagnose sys acme

ACME client diagnostics.

diagnose sys acme

diagnose sys acme add-account

Import an ACME account to 'system acme.accounts'.

diagnose sys acme add-account <id> <url> <ca_url> <status> <contact> <privatekey> <passphrase>

Parameter

Description

Type

Size

<id>

Account ID.

string

<url>

Account URL.

string

<ca_url>

Account CA URL.

string

<status>

Account Status.

string

<contact>

Account Email.

string

<privatekey>

Account PEM private key.

string

<passphrase>

Account private key passphrase.

string

diagnose sys acme delete-cert

Delete certificate from the ACME cert store for a given domain.

diagnose sys acme delete-cert <domain>

Parameter

Description

Type

Size

<domain>

Certificate's CN domain.

string

diagnose sys acme list-archive

List the certificate archive.

diagnose sys acme list-archive

diagnose sys acme list-domains

List certificates currently present in the ACME cert store by CN domain.

diagnose sys acme list-domains

diagnose sys acme purge-all

Delete the whole ACME cert store, including account data.

diagnose sys acme purge-all

diagnose sys acme purge-archive

Delete everything in the cert store archive.

diagnose sys acme purge-archive

diagnose sys acme purge-certs

Delete all certificates from the ACME cert store.

diagnose sys acme purge-certs

diagnose sys acme regenerate-client-config

Regenerate config for mod_md.

diagnose sys acme regenerate-client-config

diagnose sys acme regenerate-store

Regenerate store from config.

diagnose sys acme regenerate-store

diagnose sys acme restart

Gracefully restart Apache.

diagnose sys acme restart

diagnose sys acme show-archive

Show the certificate archive for a given CN domain.

diagnose sys acme show-archive <domain>

Parameter

Description

Type

Size

<domain>

Certificate's CN domain.

string

diagnose sys acme show-client-config

Show config files for mod_md.

diagnose sys acme show-client-config

diagnose sys acme show-passphrase

Shows the plaintext passphrase of the ACME client store.

diagnose sys acme show-passphrase

diagnose sys acme status-full

Fetch the ACME client full status log for a given CN domain.

diagnose sys acme status-full <domain>

Parameter

Description

Type

Size

<domain>

Certifate's CN domain.

string

diagnose sys bcm_intf

Bcm sdk interface

diagnose sys bcm_intf

diagnose sys bcm_intf cli

sdk command line

diagnose sys bcm_intf cli <command>

Parameter

Description

Type

Size

<command>

command to sdk

string

diagnose sys bcm_intf cmd

sdk command line

diagnose sys bcm_intf cmd <command> <parameters>

Parameter

Description

Type

Size

<command>

getreg/dump/show/listreg/listmem/phy info/phy diag/ps

string

<parameters>

command parameter

string

diagnose sys bcm_intf console

Toggle BCM SDK console debug

diagnose sys bcm_intf console

diagnose sys bcm_intf sharedmem

Shared memory

diagnose sys bcm_intf sharedmem

diagnose sys bcm_intf stats

API stats

diagnose sys bcm_intf stats

diagnose sys botnet-domain

Botnet domain diagnostics.

diagnose sys botnet-domain

diagnose sys botnet-domain hit

Botnet domain hits.

diagnose sys botnet-domain hit

diagnose sys botnet-domain list

List botnet domain entry.

diagnose sys botnet-domain list

diagnose sys botnet-ip

Botnet IP diagnostics.

diagnose sys botnet-ip

diagnose sys botnet-ip find

Find botnet IP entry.

diagnose sys botnet-ip find <ip> <port> <proto>

Parameter

Description

Type

Size

<ip>

IP address.

string

<port>

Port number.

string

<proto>

Protocol number.

string

diagnose sys botnet-ip flush

Flush botnet IP entry hit count data.

diagnose sys botnet-ip flush

diagnose sys botnet-ip hit

Show botnet IP entry hit count data.

diagnose sys botnet-ip hit

diagnose sys botnet-ip list

List botnet IP entry.

diagnose sys botnet-ip list <offset> <number>

Parameter

Description

Type

Size

<offset>

Botnet IP entry offset.

string

<number>

The number of botnet IP entries to display.

string

diagnose sys certificate-blocklist

Certificate blocklist diagnostics.

diagnose sys certificate-blocklist

diagnose sys certificate-blocklist count

Get number of entries in malware certificate blocklist.

diagnose sys certificate-blocklist count

diagnose sys certificate-blocklist delete-mcdb

Delete malicious certificate database.

diagnose sys certificate-blocklist delete-mcdb

diagnose sys certificate-blocklist query

Query with a certificate hash.

diagnose sys certificate-blocklist query <value>

Parameter

Description

Type

Size

<value>

SHA1 hash

string

diagnose sys certificate-blocklist read-range

List entries in malware certificate blocklist based on starting index and count.

diagnose sys certificate-blocklist read-range <start> <count>

Parameter

Description

Type

Size

<start>

Index of first element

string

<count>

Number of elements

string

diagnose sys certificate-blocklist status

Display certificate blocklist status.

diagnose sys certificate-blocklist status

diagnose sys cmdb

CMDB related information.

diagnose sys cmdb

diagnose sys cmdb buf-sz

Show cmdb buffer size.

diagnose sys cmdb buf-sz

diagnose sys cmdb check-lock

Check CMDB lock.

diagnose sys cmdb check-lock

diagnose sys cmdb dump

Dump cmdb internal data.

diagnose sys cmdb dump

diagnose sys cmdb dump vdom

Dump vdom data.

diagnose sys cmdb dump vdom <global/vdom-name>

Parameter

Description

Type

Size

<global/vdom-name>

Dump global or vdom-name data details.

string

diagnose sys cmdb flag

CMDB related flags.

diagnose sys cmdb flag

diagnose sys cmdb flag info

CMDB related flags information.

diagnose sys cmdb flag info

diagnose sys cmdb flag reset

Reset CMDB related flags.

diagnose sys cmdb flag reset

diagnose sys cmdb flag reset script-running

Reset CMDB script-running flag.

diagnose sys cmdb flag reset script-running

diagnose sys cmdb info

CMDB information.

diagnose sys cmdb info

diagnose sys cmdb obj-verno

Display object version#.

diagnose sys cmdb obj-verno <global|vdom-name> <obj-path> <obj-name>

Parameter

Description

Type

Size

<global|vdom-name>

global or vdom-name.

string

<obj-path>

object path.

string

<obj-name>

object name.

string

diagnose sys cmdb refcnt

Datasource reference count.

diagnose sys cmdb refcnt

diagnose sys cmdb refcnt reset

Reset reference count to be consistent with real reference.

diagnose sys cmdb refcnt reset <path.object.mkey> <tablename>

Parameter

Description

Type

Size

<path.object.mkey>

Table.

string

<tablename>

Entry.

string

diagnose sys cmdb refcnt show

Show datasource reference details.

diagnose sys cmdb refcnt show <path.object.mkey> <tablename>

Parameter

Description

Type

Size

<path.object.mkey>

Table.

string

<tablename>

Entry.

string

diagnose sys cmdb set-readlock

Set CMDB read lock.

diagnose sys cmdb set-readlock

diagnose sys cmdb unset-readlock

Unset CMDB read lock.

diagnose sys cmdb unset-readlock

diagnose sys cmdb-profile

Get CMDB profile information.

diagnose sys cmdb-profile

diagnose sys cmdb-profile info

Get CMDB profile shm info.

diagnose sys cmdb-profile info

diagnose sys cmdb-profile node

Get CMDB profile by node.

diagnose sys cmdb-profile node <path.object[.attribute]>

Parameter

Description

Type

Size

<path.object[.attribute]>

Path to object/attribute.

string

diagnose sys cmdb-profile reset

Reset CMDB profile shm info.

diagnose sys cmdb-profile reset

diagnose sys cmdb-profile top10

sort nodes by operator's time

diagnose sys cmdb-profile top10

diagnose sys cmdb-profile top10 average

sort nodes by operator's average time

diagnose sys cmdb-profile top10 average [n]

Parameter

Description

Type

Size

[n]

get n nodes' profile (optional, default is 10)

string

diagnose sys cmdb-profile top10 total

sort nodes by operator's total time

diagnose sys cmdb-profile top10 total [n]

Parameter

Description

Type

Size

[n]

get n nodes' profile (optional, default is 10)

string

diagnose sys config-transaction

Config transaction related information.

diagnose sys config-transaction

diagnose sys config-transaction show

Show config transaction information.

diagnose sys config-transaction show

diagnose sys config-transaction show entity-by-txn

Show configuration objects being configured by individual transactions.

diagnose sys config-transaction show entity-by-txn <txn-id>

Parameter

Description

Type

Size

<txn-id>

Transaction ID.

string

diagnose sys config-transaction show mctx

Show mctx.

diagnose sys config-transaction show mctx

diagnose sys config-transaction show txn-cli-commands

Show CLI commands used in a given transaction.

diagnose sys config-transaction show txn-cli-commands <txn-id>

Parameter

Description

Type

Size

<txn-id>

Transaction ID.

string

diagnose sys config-transaction show txn-entity

Show configuration objects being configured in transactions.

diagnose sys config-transaction show txn-entity

diagnose sys config-transaction show txn-info

Show config transaction details.

diagnose sys config-transaction show txn-info

diagnose sys config-transaction show txn-lock

Show transaction lock status.

diagnose sys config-transaction show txn-lock

diagnose sys config-transaction show txn-meta

Show config transaction meta information.

diagnose sys config-transaction show txn-meta

diagnose sys config-transaction status

Show config transaction status in current CLI.

diagnose sys config-transaction status

diagnose sys confsync

config sync

diagnose sys confsync

diagnose sys confsync cached-csum

Show conf-sync cached checksum.

diagnose sys confsync cached-csum <global/vdom-name>

Parameter

Description

Type

Size

<global/vdom-name>

Show global or a specific vdom's cached checksum.

string

diagnose sys confsync csum-recalculate

Re-calculate conf-sync checksum.

diagnose sys confsync csum-recalculate <vdom-name> or <global>

Parameter

Description

Type

Size

<vdom-name> or <global>

Re-calculate conf-sync checksum.

string

diagnose sys confsync dump

dump confsyncd status

diagnose sys confsync dump <level>

Parameter

Description

Type

Size

<level>

<integer>

string

diagnose sys confsync showcsum

show conf-sync checksum

diagnose sys confsync showcsum <Enter> or <global/vdom-name> <level> or <object-fullpath> <Enter> or <entry-name>

Parameter

Description

Type

Size

<Enter> or <global/vdom-name>

<Enter> to show system checksum; <global/vdom-name> to show global/vdom-name detail checksum.

string

<level> or <object-fullpath>

<level> to show n-th level objects checksum; <object-fullpath> to show individual object's detail checksum.

string

<Enter> or <entry-name>

<Enter> to show the specific object's detail checksum; <entry-name> to show a single entry's detail checksum.

string

diagnose sys confsync status

status

diagnose sys confsync status

diagnose sys cpuset

cpuset

diagnose sys cpuset

diagnose sys cpuset interrupt

cpuset of interrupt

diagnose sys cpuset interrupt <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

id of an interrupt

string

<xxx>

cpuset mask

string

diagnose sys cpuset process

cpuset of process

diagnose sys cpuset process <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

pid of a process

string

<xxx>

cpuset mask

string

diagnose sys csf

Security Fabric diagnostics.

diagnose sys csf

diagnose sys csf authorization

Authorization requests and permits.

diagnose sys csf authorization

diagnose sys csf authorization accept

Authorize device to join CSF tree.

diagnose sys csf authorization accept <SN> [Name]

Parameter

Description

Type

Size

<SN>

Serial number.

string

[Name]

Optional entry name (if not passed SN is used).

string

diagnose sys csf authorization deny

Deny device from joining CSF tree.

diagnose sys csf authorization deny <SN> [Name]

Parameter

Description

Type

Size

<SN>

Serial number.

string

[Name]

Optional entry name (if not passed SN is used).

string

diagnose sys csf authorization pending-list

List of pending requests to join security fabric.

diagnose sys csf authorization pending-list

diagnose sys csf downstream

Show connected downstream FortiGates.

diagnose sys csf downstream [-x] [-a]

Parameter

Description

Type

Size

[-x]

Show encrypted tokens

string

[-a]

Show all devices

string

diagnose sys csf downstream-devices

Show downstream fabric device.

diagnose sys csf downstream-devices <device type> [vdom] [group]

Parameter

Description

Type

Size

<device type>

fabric device type (e.g. fortinac, fortimail, fortivoice, any).

string

[vdom]

Connecting VDOM.

string

[group]

CSF key group.

string

diagnose sys csf dynamic-sync-read

Read incoming dynamic sync data updates

diagnose sys csf dynamic-sync-read <count>

Parameter

Description

Type

Size

<count>

Number of updates to read

string

diagnose sys csf dynamic-sync-request

Get the current dynamic sync data from csfd

diagnose sys csf dynamic-sync-request

diagnose sys csf dynamic-sync-update

Change the dynamic sync update data

diagnose sys csf dynamic-sync-update <content> <count>

Parameter

Description

Type

Size

<content>

New data content string

string

<count>

Number of times to repeat the content string line

string

diagnose sys csf fabric-device

Debug fabric device handling.

diagnose sys csf fabric-device

diagnose sys csf fabric-device list

List all known fabric devices.

diagnose sys csf fabric-device list

diagnose sys csf file

csfd file management.

diagnose sys csf file

diagnose sys csf file cat

Dump file.

diagnose sys csf file cat <name>

Parameter

Description

Type

Size

<name>

Name of the file to be dumped.

string

diagnose sys csf file top-mem

Display largest files.

diagnose sys csf file top-mem [count]

Parameter

Description

Type

Size

[count]

Number of files to be displayed ([1 - 20] default = 5).

string

diagnose sys csf forticloud-id-list

List of FortiCloud IDs of downstreams.

diagnose sys csf forticloud-id-list

diagnose sys csf get-bulk-global-view

Request global view file

diagnose sys csf get-bulk-global-view [refresh seconds]

Parameter

Description

Type

Size

[refresh seconds]

Acceptable age for cached global file in seconds.

string

diagnose sys csf global

Show a summary of all connected members in Security Fabric.

diagnose sys csf global

diagnose sys csf initialize-cmd

send an init command for merge.

diagnose sys csf initialize-cmd <path> <cmdb_path> <cmdb_table>

Parameter

Description

Type

Size

<path>

fabric path made of serial numbers e.g: SNCURRENT:SNMIDDLE:SNDESTINATION.

string

<cmdb_path>

path for cmdb table

string

<cmdb_table>

cmdb table name

string

diagnose sys csf merge-cmd

send a merge command to downstream.

diagnose sys csf merge-cmd <path> <cmdb_path> <cmdb_table> <key> <new_key>

Parameter

Description

Type

Size

<path>

fabric path made of serial numbers e.g: SNCURRENT:SNMIDDLE:SNDESTINATION.

string

<cmdb_path>

path for cmdb table

string

<cmdb_table>

cmdb table name

string

<key>

current entry name

string

<new_key>

new entry name

string

diagnose sys csf neighbor

CSF enabled devices in adjacency.

diagnose sys csf neighbor

diagnose sys csf neighbor flush

Clear discovered physical addresses of adjacent devices.

diagnose sys csf neighbor flush [interface]

Parameter

Description

Type

Size

[interface]

Receiving local interface name.

string

diagnose sys csf neighbor list

List discovered physical addresses of adjacent devices.

diagnose sys csf neighbor list [interface]

Parameter

Description

Type

Size

[interface]

Receiving local interface name.

string

diagnose sys csf query

Query through CSF.

diagnose sys csf query <path> [-pt]

Parameter

Description

Type

Size

<path>

FGT1(SN):FGT2(SN):...:FGTn(SN)

string

[-pt]

-p:Partial process. -t:Send health check ping request.

string

diagnose sys csf ratelimit-test-sender

Floods a socket tunnel to test rate limit behaviour.

diagnose sys csf ratelimit-test-sender <serial>

Parameter

Description

Type

Size

<serial>

Serial number of destination FortiGate.

string

diagnose sys csf ratelimit-test-server

A dummy server for the unix tunnel rate limit testing to work against.

diagnose sys csf ratelimit-test-server <close-delay-seconds>

Parameter

Description

Type

Size

<close-delay-seconds>

Seconds to keep the client socket open after accepting it.

string

diagnose sys csf send-test-log-upstream

Send a test log to upstream

diagnose sys csf send-test-log-upstream

diagnose sys csf seqpacket-message-listener

Read a line over a tunneled seqpacket socket.

diagnose sys csf seqpacket-message-listener <all|root|upstream|downstream>

Parameter

Description

Type

Size

<all|root|upstream|downstream>

Client FortiGates to allow.

string

diagnose sys csf seqpacket-message-sender

Read a line over a tunneled seqpacket socket.

diagnose sys csf seqpacket-message-sender <serial> <all|root|upstream|downstream>

Parameter

Description

Type

Size

<serial>

Serial number of destination FortiGate.

string

<all|root|upstream|downstream>

Allow mode of the destination.

string

diagnose sys csf stream-message-listener

Read a line over a tunneled stream socket

diagnose sys csf stream-message-listener <all|root|upstream|downstream>

Parameter

Description

Type

Size

<all|root|upstream|downstream>

Client FortiGates to allow.

string

diagnose sys csf stream-message-sender

Read a line over a tunneled stream socket.

diagnose sys csf stream-message-sender <serial> <all|root|upstream|downstream>

Parameter

Description

Type

Size

<serial>

Serial number of destination FortiGate.

string

<all|root|upstream|downstream>

Allow mode of the destination.

string

diagnose sys csf trigger-info-update

Trigger an info file update

diagnose sys csf trigger-info-update <groups>

Parameter

Description

Type

Size

<groups>

CSF key groups in hex

string

diagnose sys csf tunnel-test-listener

Test the reliable tunnel, listener side

diagnose sys csf tunnel-test-listener

diagnose sys csf tunnel-test-sender

Test the reliable tunnel, sender side

diagnose sys csf tunnel-test-sender <target-sn> <msg-content> <repeats>

Parameter

Description

Type

Size

<target-sn>

SN to send the message to

string

<msg-content>

Content of the message

string

<repeats>

Number of times to repeat the message

string

diagnose sys csf upstream

Show connected upstream FortiGates.

diagnose sys csf upstream

diagnose sys csf versions

get latest incremental version of CSF groups.

diagnose sys csf versions

diagnose sys csum

System checksum.

diagnose sys csum <file>

Parameter

Description

Type

Size

<file>

File name.

string

diagnose sys dayst-info

Daylight saving time information.

diagnose sys dayst-info <timezone db name> [year]

Parameter

Description

Type

Size

<timezone db name>

Timezone Database Name.

string

[year]

year

string

diagnose sys device

Virtual domain device management.

diagnose sys device

diagnose sys device add

Add device to Virtual Domain.

diagnose sys device add <vdname> <devname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

<devname>

Device Name.

string

diagnose sys device delete

Delete device from Virtual Domain.

diagnose sys device delete <vdname> <devname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

<devname>

Device Name.

string

diagnose sys device list

List devices in Virtual Domain.

diagnose sys device list <vdname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

diagnose sys digital-io

Diagnose commands for digital-io.

diagnose sys digital-io

diagnose sys digital-io state

Show digital io state

diagnose sys digital-io state

diagnose sys dump-conserve-info

Dump all conserve related info to disk.

diagnose sys dump-conserve-info

diagnose sys elbc

elbc info

diagnose sys elbc

diagnose sys elbc haoc-hb-status

HAoC heartbeat status

diagnose sys elbc haoc-hb-status

diagnose sys emac-vlan

EMAC VLAN diagnostics.

diagnose sys emac-vlan

diagnose sys emac-vlan fdb

EMAC VLAN forwarding DB.

diagnose sys emac-vlan fdb

diagnose sys emac-vlan fdb list

Display EMAC VLAN forwarding DB.

diagnose sys emac-vlan fdb list <string>

Parameter

Description

Type

Size

<string>

Interface name.

string

diagnose sys emac-vlan stat

Statistics of EMAC VLAN interfaces.

diagnose sys emac-vlan stat <string>

Parameter

Description

Type

Size

<string>

Underlying interface name.

string

diagnose sys external-address-resource

External address resource.

diagnose sys external-address-resource

diagnose sys external-address-resource list

list

diagnose sys external-address-resource list <name>

Parameter

Description

Type

Size

<name>

External address resource name.

string

diagnose sys external-mac-resource

External mac resource.

diagnose sys external-mac-resource

diagnose sys external-mac-resource list

list

diagnose sys external-mac-resource list <name>

Parameter

Description

Type

Size

<name>

External mac resource name.

string

diagnose sys external-resource

External resource.

diagnose sys external-resource

diagnose sys external-resource list

Dump external resource file by name.

diagnose sys external-resource list <name>

Parameter

Description

Type

Size

<name>

Name of external resource.

string

diagnose sys external-resource push-add

Add entry to external resource set to push updates.

diagnose sys external-resource push-add

diagnose sys external-resource push-api-json-commands

Test push commands JSON API

diagnose sys external-resource push-api-json-commands <COMMANDS-JSON>

Parameter

Description

Type

Size

<COMMANDS-JSON>

JSON string for commands.

string

diagnose sys external-resource push-remove

Remove entry to push external resource set to push updates.

diagnose sys external-resource push-remove

diagnose sys external-resource push-snapshot

Overwrite external resource set to push updates.

diagnose sys external-resource push-snapshot

diagnose sys external-resource stats

Display external resource file info.

diagnose sys external-resource stats <name>

Parameter

Description

Type

Size

<name>

Name of external resource.

string

diagnose sys external-resource stats-cache

Display cached external resource file stats.

diagnose sys external-resource stats-cache <name>

Parameter

Description

Type

Size

<name>

Name of external resource.

string

diagnose sys filesystem

File system.

diagnose sys filesystem

diagnose sys filesystem hash

Generate hash for files within the filesystem.

diagnose sys filesystem hash

diagnose sys filesystem last-modified-files

List the last modified files.

diagnose sys filesystem last-modified-files [path] [number]

Parameter

Description

Type

Size

[path]

Path for listing modified files (default = /data).

string

[number]

Number of files to list (default = 10).

string

diagnose sys filesystem lsof

List open files

diagnose sys filesystem lsof

diagnose sys filesystem open-files

List open files.

diagnose sys filesystem open-files [path]

Parameter

Description

Type

Size

[path]

Path of file or directory to check against.

string

diagnose sys filesystem tree

List the top files/folders tree.

diagnose sys filesystem tree [path] [number]

Parameter

Description

Type

Size

[path]

Path for listing files/folder (default = /var/log).

string

[number]

Number of files in each current folder and subfolder to be listed (default = 10).

string

diagnose sys fips

FIPS mode.

diagnose sys fips

diagnose sys fips error-mode

Go to error mode.

diagnose sys fips error-mode

diagnose sys fips kat-error

Force test failure at next self-test.

diagnose sys fips kat-error <KAT>

Parameter

Description

Type

Size

<KAT>

KAT, empty to display available values.

string

diagnose sys flash

Flash image.

diagnose sys flash

diagnose sys flash format

format shared data partition (flash partition #3)

diagnose sys flash format

diagnose sys flash list

List flash images.

diagnose sys flash list <file>

Parameter

Description

Type

Size

<file>

List files.

string

diagnose sys forticonverter

FortiConverter config conversion service diagnostics.

diagnose sys forticonverter set-prompt-visibility

Parameter

Description

Type

Size

set-prompt-visibility

Set the visibility for the FortiConverter wizard on login.

option

diagnose sys forticonverter available-source-devices

Retrieve known source device options for a ticket.

diagnose sys forticonverter available-source-devices <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve device information for.

string

diagnose sys forticonverter create-ticket

Create a ticket for FortiConverter conversion services.

diagnose sys forticonverter create-ticket

diagnose sys forticonverter custom-create-ticket

Use the custom request API to create a ticket for FortiConverter conversion services.

diagnose sys forticonverter custom-create-ticket

diagnose sys forticonverter download-status

Get current download status.

diagnose sys forticonverter download-status <ticket-id> <extension>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to check for download status

string

<extension>

Extension of the file to check.

string

diagnose sys forticonverter eligibility-status

Show current FortiConverter eligibility status.

diagnose sys forticonverter eligibility-status

diagnose sys forticonverter get-prompt-visibility

Read the visibility status for the FortiConverter wizard on login.

diagnose sys forticonverter get-prompt-visibility

diagnose sys forticonverter result-availability

Retrieve result file availability status for a ticket.

diagnose sys forticonverter result-availability <ticket-id> <extension>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve result availability for.

string

<extension>

File extension to retrieve availability for.

string

diagnose sys forticonverter set-source-fortigate

Set the source FortiGate for a FortiConverter ticket.

diagnose sys forticonverter set-source-fortigate <ticket-id> <source-serial>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to set the source FortiGate for.

string

<source-serial>

Serial number of the source FortiGate.

string

diagnose sys forticonverter source-config-upload-status

Retrieve source config upload status for a draft ticket.

diagnose sys forticonverter source-config-upload-status <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve source config upload status info for.

string

diagnose sys forticonverter source-interfaces

Retrieve source interface JSON for a draft ticket.

diagnose sys forticonverter source-interfaces <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve interface information for.

string

diagnose sys forticonverter start-download

Start download of config from a ticket.

diagnose sys forticonverter start-download <ticket-id> <extension>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to download from.

string

<extension>

Extension of the file to download.

string

diagnose sys forticonverter submitted-info

Retrieve previously submitted info for a draft ticket.

diagnose sys forticonverter submitted-info <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to retrieve submitted info for.

string

diagnose sys forticonverter update-eligibility

Request updated eligibility status from FortiConverter.

diagnose sys forticonverter update-eligibility

diagnose sys forticonverter update-result-availability

Request updated result availability from FortiConverter.

diagnose sys forticonverter update-result-availability

diagnose sys forticonverter upload-local-config

Upload local config to a ticket for this FGT. Debugging purposes only.

diagnose sys forticonverter upload-local-config <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to upload config to.

string

diagnose sys forticonverter upload-status

Retrieve upload status for a ticket.

diagnose sys forticonverter upload-status <ticket-id>

Parameter

Description

Type

Size

<ticket-id>

Ticket ID to upload config to.

string

diagnose sys fortiswitch-heartbeat

fortiswitch heart beat information

diagnose sys fortiswitch-heartbeat

diagnose sys fortiswitch-heartbeat assist-pkt-stats

assistant packet statistics

diagnose sys fortiswitch-heartbeat assist-pkt-stats

diagnose sys fortiswitch-heartbeat assist-pkt-stats clear

reset assistant packet statistics

diagnose sys fortiswitch-heartbeat assist-pkt-stats clear

diagnose sys fortiswitch-heartbeat config

calculated ELBC config

diagnose sys fortiswitch-heartbeat config

diagnose sys fortiswitch-heartbeat status

heartbeat status

diagnose sys fortiswitch-heartbeat status

diagnose sys fullcone

Fullcone diagnostics.

diagnose sys fullcone

diagnose sys geneve

GENEVE diagnostics.

diagnose sys geneve

diagnose sys geneve list

Display GENEVE devices.

diagnose sys geneve list

diagnose sys geneve stat

Display GENEVE statistics.

diagnose sys geneve stat

diagnose sys gre

GRE diagnostics.

diagnose sys gre

diagnose sys gre keepalive

Keepalive status in GRE tunnels.

diagnose sys gre keepalive <name | all>

Parameter

Description

Type

Size

<name | all>

GRE tunnel name

string

diagnose sys gre list

List GRE tunnels.

diagnose sys gre list

diagnose sys h323

H323 diagnostics.

diagnose sys h323

diagnose sys h323 call

H323 calls.

diagnose sys h323 call

diagnose sys h323 call list

List H323 calls.

diagnose sys h323 call list

diagnose sys h323 debug-mask

Mask for H323 kernel trace.

diagnose sys h323 debug-mask <mask>

Parameter

Description

Type

Size

<mask>

0-disable, 1-parser, 2-CS, 4-RAS, 8-h245.

string

diagnose sys h323 peer

H323 peers.

diagnose sys h323 peer

diagnose sys h323 peer list

List H323 peers.

diagnose sys h323 peer list

diagnose sys h323 status

Display h323 status.

diagnose sys h323 status

diagnose sys ha

High availability.

diagnose sys ha

diagnose sys ha check-vc

check-vc

diagnose sys ha check-vc

diagnose sys ha checksum

checksum.

diagnose sys ha checksum

diagnose sys ha checksum cached

Show HA cached checksum.

diagnose sys ha checksum cached <global/vdom-name>

Parameter

Description

Type

Size

<global/vdom-name>

Show global or a specific vdom's cached HA checksum.

string

diagnose sys ha checksum cluster

Show HA cluster checksum by serial number.

diagnose sys ha checksum cluster

diagnose sys ha checksum log

Enable/disable log.

diagnose sys ha checksum log

diagnose sys ha checksum log clear

Clear log.

diagnose sys ha checksum log clear

diagnose sys ha checksum log disable

Disable log.

diagnose sys ha checksum log disable

diagnose sys ha checksum log enable

Enable log.

diagnose sys ha checksum log enable

diagnose sys ha checksum recalculate

Re-calculate HA checksum.

diagnose sys ha checksum recalculate <Enter> or <global/vdom-name>

Parameter

Description

Type

Size

<Enter> or <global/vdom-name>

<Enter> to re-calculate all checksums, or global/vdom-name to re-calculate global or a specific vdom HA checksum.

string

diagnose sys ha checksum show

Show HA checksum.

diagnose sys ha checksum show <Enter> or <global/vdom-name> <Enter> or <object-fullpath> <Enter> or <entry-name>

Parameter

Description

Type

Size

<Enter> or <global/vdom-name>

<Enter> to show system checksum; <global/vdom-name> to show global/vdom-name detail checksum.

string

<Enter> or <object-fullpath>

<Enter> to show objects checksum; <object-fullpath> to show individual object's detail checksum.

string

<Enter> or <entry-name>

<Enter> to show the specific object's detail checksum; <entry-name> to show a single entry's detail checksum.

string

diagnose sys ha checksum show-nonsync

Show non-sync HA checksum.

diagnose sys ha checksum show-nonsync

diagnose sys ha checksum test

test.

diagnose sys ha checksum test

diagnose sys ha dump-by

Dump HA data by name.

diagnose sys ha dump-by

diagnose sys ha dump-by debug-zone

Dump HA debug zone.

diagnose sys ha dump-by debug-zone

diagnose sys ha dump-by device

Dump HA device.

diagnose sys ha dump-by device

diagnose sys ha dump-by group

Dump all group.

diagnose sys ha dump-by group

diagnose sys ha dump-by kernel

Dump HA kernel info.

diagnose sys ha dump-by kernel

diagnose sys ha dump-by rcache

Dump rcache.

diagnose sys ha dump-by rcache

diagnose sys ha dump-by vcluster

Dump all vcluster.

diagnose sys ha dump-by vcluster

diagnose sys ha dump-by vdom

Dump HA vdom info.

diagnose sys ha dump-by vdom

diagnose sys ha extfile-sig

Dump extfile's signature.

diagnose sys ha extfile-sig

diagnose sys ha fgsp-zone

FGSP zone information.

diagnose sys ha fgsp-zone

diagnose sys ha fib

FIB information.

diagnose sys ha fib

diagnose sys ha hactx-stats

HA context statistics

diagnose sys ha hactx-stats

diagnose sys ha hactx-stats clear

HA context statistics

diagnose sys ha hactx-stats clear

diagnose sys ha hadiff

HA diff debug.

diagnose sys ha hadiff

diagnose sys ha hadiff log

Enable/disable log.

diagnose sys ha hadiff log

diagnose sys ha hadiff log clear

Clear log.

diagnose sys ha hadiff log clear

diagnose sys ha hadiff log disable

Disable log.

diagnose sys ha hadiff log disable

diagnose sys ha hadiff log enable

Enable log.

diagnose sys ha hadiff log enable

diagnose sys ha hadiff max-sync-turns

Set/get max number of sync turns.

diagnose sys ha hadiff max-sync-turns <integer>

Parameter

Description

Type

Size

<integer>

Set/get max number of sync turns.

string

diagnose sys ha hadiff max-unsync-wait

Set/get max unsync wait times.

diagnose sys ha hadiff max-unsync-wait <integer>

Parameter

Description

Type

Size

<integer>

Maximum unsync wait times.

string

diagnose sys ha hadiff status

HA diff status.

diagnose sys ha hadiff status

diagnose sys ha hadiff sync-from-higher

enable/disable sync config from higher build.

diagnose sys ha hadiff sync-from-higher <Integer>

Parameter

Description

Type

Size

<Integer>

the value: 0(=disable), 1(=enable).

string

diagnose sys ha hasync-conn-max-buf

Set the hasync connection maximum buffer number.

diagnose sys ha hasync-conn-max-buf <hasync-conn-max-buf>

Parameter

Description

Type

Size

<hasync-conn-max-buf>

Max number of buffers.

string

diagnose sys ha hasync-stats

hasync daemon stats.

diagnose sys ha hasync-stats

diagnose sys ha hasync-stats all

Display hasync all objects' stats.

diagnose sys ha hasync-stats all

diagnose sys ha hasync-stats by-object

Display hasync stats by object.

diagnose sys ha hasync-stats by-object <integer>

Parameter

Description

Type

Size

<integer>

Object number.

string

diagnose sys ha hasync-stats most-recent

Display hasync objects recent stats.

diagnose sys ha hasync-stats most-recent [integer]

Parameter

Description

Type

Size

[integer]

Most recent # of objects to display.

string

diagnose sys ha hasync-stats most-time

Display hasync objects ranked by total time.

diagnose sys ha hasync-stats most-time [interger]

Parameter

Description

Type

Size

[interger]

# of top objects to display.

string

diagnose sys ha heartbeat

Show kernel heartbeat stats.

diagnose sys ha heartbeat

diagnose sys ha history

Cluster history information.

diagnose sys ha history

diagnose sys ha history clear

Clear cluster history.

diagnose sys ha history clear

diagnose sys ha history read

Display cluster history.

diagnose sys ha history read

diagnose sys ha mac

Mac Information.

diagnose sys ha mac

diagnose sys ha pingsvr-secondary-force-reset

Reset HA up time.

diagnose sys ha pingsvr-secondary-force-reset

diagnose sys ha recalculate-extfile-signature

Recalculate external files signature in hasync daemon.

diagnose sys ha recalculate-extfile-signature

diagnose sys ha reset-health-status

Reset HA health status.

diagnose sys ha reset-health-status

diagnose sys ha reset-uptime

Reset HA up time.

diagnose sys ha reset-uptime

diagnose sys ha reset-uptime-primary-only

Reset HA up time (can take effect on primary unit only).

diagnose sys ha reset-uptime-primary-only

diagnose sys ha session-sync-dev

Session sync ports.

diagnose sys ha session-sync-dev

diagnose sys ha session-sync-dev clear

Clear session sync ports.

diagnose sys ha session-sync-dev clear

diagnose sys ha session-sync-dev set

Configure session sync ports.

diagnose sys ha session-sync-dev set

diagnose sys ha standalone-peers

Standalone peers on kernel.

diagnose sys ha standalone-peers

diagnose sys ha standalone-peers reset-stats

Reset standalone peers session/packet type counters in kernel.

diagnose sys ha standalone-peers reset-stats

diagnose sys ha stats

statistics

diagnose sys ha stats

diagnose sys ha status

status

diagnose sys ha status

diagnose sys ha sync-stats

Dump HA sync statistics.

diagnose sys ha sync-stats

diagnose sys ha sync-stats-reset

Reset HA sync statistics.

diagnose sys ha sync-stats-reset

diagnose sys ha vlan-hb-monitor

Dump vlan heartbeat monitor list.

diagnose sys ha vlan-hb-monitor

diagnose sys icap-remote-server

Display remote icap servers status.

diagnose sys icap-remote-server

diagnose sys icap-remote-server status

List remote icap servers status.

diagnose sys icap-remote-server status

diagnose sys iotop

Show disk-accessing processes.

diagnose sys iotop <interval>

Parameter

Description

Type

Size

<interval>

Print interval in seconds (default to 5). Accept value from 5 to 3600.

string

diagnose sys ipam

IP Address Management diagnostics.

diagnose sys ipam

diagnose sys ipam delete

delete

diagnose sys ipam delete

diagnose sys ipam delete device

Delete device from IPAM server.

diagnose sys ipam delete device <sn>

Parameter

Description

Type

Size

<sn>

SN of device to delete from IPAM server.

string

diagnose sys ipam largest-available-subnet

Get the largest currently available subnet size.

diagnose sys ipam largest-available-subnet

diagnose sys ipam list

list

diagnose sys ipam list

diagnose sys ipam list entries

List IPAM entries.

diagnose sys ipam list entries

diagnose sys ipam list free-subnets

List free IPAM subnets.

diagnose sys ipam list free-subnets

diagnose sys ipsec-aggregate

IPsec aggregate diagnostics.

diagnose sys ipsec-aggregate

diagnose sys ipsec-aggregate list

List IPsec aggregates.

diagnose sys ipsec-aggregate list <name>

Parameter

Description

Type

Size

<name>

IPsec aggregate name

string

diagnose sys kill

Kill the process ID.

diagnose sys kill <signal> <pid>

Parameter

Description

Type

Size

<signal>

Signal number.

string

<pid>

Process ID.

string

diagnose sys link-monitor

Link Monitor.

diagnose sys link-monitor

diagnose sys link-monitor filter

Filter link-monitor

diagnose sys link-monitor filter

diagnose sys link-monitor filter clear

Clear all filters.

diagnose sys link-monitor filter clear

diagnose sys link-monitor filter name

Link monitor names <name>.

diagnose sys link-monitor filter name <name>

Parameter

Description

Type

Size

<name>

Link monitor name.

string

diagnose sys link-monitor interface

interface quality.

diagnose sys link-monitor interface <name> <childname>

Parameter

Description

Type

Size

<name>

Show details of an interface entry.

string

<childname>

Child interface name.

string

diagnose sys link-monitor launch

Launching a link monitor entry manually.

diagnose sys link-monitor launch <entry name>

Parameter

Description

Type

Size

<entry name>

Entry.

string

diagnose sys link-monitor reset-monitor

Reset link monitor statistics.

diagnose sys link-monitor reset-monitor <name>

Parameter

Description

Type

Size

<name>

Link monitor name.

string

diagnose sys link-monitor sdwan-hc

SD-WAN health-check monitors.

diagnose sys link-monitor sdwan-hc <name> <seq>

Parameter

Description

Type

Size

<name>

Health check name.

string

<seq>

Sequence number.

string

diagnose sys link-monitor sdwan-service

SD-WAN rule monitors.

diagnose sys link-monitor sdwan-service <name> <seq>

Parameter

Description

Type

Size

<name>

Heach check name.

string

<seq>

Sequence number.

string

diagnose sys link-monitor shm-stats

Read link monitor statistics in SHM.

diagnose sys link-monitor shm-stats <name>

Parameter

Description

Type

Size

<name>

Link monitor name.

string

diagnose sys link-monitor status

status

diagnose sys link-monitor status <name | all>

Parameter

Description

Type

Size

<name | all>

Show details of monitor entry.

string

diagnose sys link-monitor tunnel

tunnel

diagnose sys link-monitor tunnel <name | all> <child name>

Parameter

Description

Type

Size

<name | all>

Show details of tunnel monitor entry.

string

<child name>

Show details of child monitor for tunnel.

string

diagnose sys link-monitor-passive

Link Monitor passive.

diagnose sys link-monitor-passive

diagnose sys link-monitor-passive admin

Passive reports measured by the kernel.

diagnose sys link-monitor-passive admin

diagnose sys link-monitor-passive admin delete

Delete a report.

diagnose sys link-monitor-passive admin delete <interface> <application>

Parameter

Description

Type

Size

<interface>

Interface device index.

string

<application>

Internet service or application ID.

string

diagnose sys link-monitor-passive admin flush

Flush all the reports.

diagnose sys link-monitor-passive admin flush

diagnose sys link-monitor-passive admin list

List one or all the collected passive reports.

diagnose sys link-monitor-passive admin list <interface> <application> <application>

Parameter

Description

Type

Size

<interface> <application>

List the passive report by the given interface and application.

string

<application>

Set the application.

string

diagnose sys link-monitor-passive admin list by-application

List passive reports and sort by application.

diagnose sys link-monitor-passive admin list by-application <application>

Parameter

Description

Type

Size

<application>

List reports of the given application.

string

diagnose sys link-monitor-passive admin list by-interface

List passive reports and sort by interface.

diagnose sys link-monitor-passive admin list by-interface <interface>

Parameter

Description

Type

Size

<interface>

List reports of the given interface

string

diagnose sys link-monitor-passive agent

Passive reports measured by agents.

diagnose sys link-monitor-passive agent

diagnose sys link-monitor-passive agent agent-oif-map

List agent and interface maps.

diagnose sys link-monitor-passive agent agent-oif-map

diagnose sys link-monitor-passive agent flush

Flush all the collected reports.

diagnose sys link-monitor-passive agent flush

diagnose sys link-monitor-passive agent flush-app

Flush details of all the applications.

diagnose sys link-monitor-passive agent flush-app

diagnose sys link-monitor-passive agent list

List all the collected reports.

diagnose sys link-monitor-passive agent list

diagnose sys link-monitor-passive agent list-app

List details of each application.

diagnose sys link-monitor-passive agent list-app

diagnose sys link-monitor-passive agent send-report

Mock an agent to send application performance.

diagnose sys link-monitor-passive agent send-report <src> <app_id> <app_name> <latency> <jitter> <pktloss> <ntt> <srt> <app_err>

Parameter

Description

Type

Size

<src>

Agent address.

string

<app_id>

Application ID.

string

<app_name>

Application name.

string

<latency>

Collected latency.

string

<jitter>

Collectd jitter.

string

<pktloss>

Collected pktloss

string

<ntt>

Collected ntt.

string

<srt>

Collectd srt.

string

<app_err>

Collected application errors

string

diagnose sys link-monitor-passive remote

Passive reports measured by remote peer.

diagnose sys link-monitor-passive remote

diagnose sys link-monitor-passive remote list

List one or all the collected reports.

diagnose sys link-monitor-passive remote list

diagnose sys logdisk

Display log disk status.

diagnose sys logdisk

diagnose sys logdisk purge-log-data

Purge disk log data, including disk logs and FortiView data.

diagnose sys logdisk purge-log-data

diagnose sys logdisk quota

Show log disk quota info.

diagnose sys logdisk quota

diagnose sys logdisk smart

Show log disk S.M.A.R.T. info.

diagnose sys logdisk smart

diagnose sys logdisk status

Display log disk status.

diagnose sys logdisk status

diagnose sys logdisk status monitor

Monitor log disk status.

diagnose sys logdisk status monitor

diagnose sys logdisk usage

Show log disk stats.

diagnose sys logdisk usage

diagnose sys lte-modem

lte-modem

diagnose sys lte-modem

diagnose sys lte-modem info

LTE Modem information

diagnose sys lte-modem info

diagnose sys mcast-session

multicast session

diagnose sys mcast-session

diagnose sys mcast-session clear

Clear the sessions defined by filter.

diagnose sys mcast-session clear

diagnose sys mcast-session filter

List session with filters.

diagnose sys mcast-session filter

diagnose sys mcast-session filter clear

Clear session filter.

diagnose sys mcast-session filter clear

diagnose sys mcast-session filter clear dport

Clear destination port filter.

diagnose sys mcast-session filter clear dport

diagnose sys mcast-session filter clear dst

Clear destination IP filter.

diagnose sys mcast-session filter clear dst

diagnose sys mcast-session filter clear proto

Clear protocol filter.

diagnose sys mcast-session filter clear proto

diagnose sys mcast-session filter clear sintf

Clear source interface filter.

diagnose sys mcast-session filter clear sintf

diagnose sys mcast-session filter clear sport

Clear source port filter.

diagnose sys mcast-session filter clear sport

diagnose sys mcast-session filter clear src

Clear source IP filter.

diagnose sys mcast-session filter clear src

diagnose sys mcast-session filter clear vd

Clear virtual domain filter.

diagnose sys mcast-session filter clear vd

diagnose sys mcast-session filter dport

Destination port.

diagnose sys mcast-session filter dport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys mcast-session filter dst

Destination IP address.

diagnose sys mcast-session filter dst <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP (from).

string

<xxx.xxx.xxx.xxx>

Destination IP (to).

string

diagnose sys mcast-session filter negate

Inverse filter.

diagnose sys mcast-session filter negate

diagnose sys mcast-session filter negate dport

Inverse destination port.

diagnose sys mcast-session filter negate dport

diagnose sys mcast-session filter negate dst

Inverse destination IP.

diagnose sys mcast-session filter negate dst

diagnose sys mcast-session filter negate proto

Inverse protocol.

diagnose sys mcast-session filter negate proto

diagnose sys mcast-session filter negate sintf

Inverse source interface.

diagnose sys mcast-session filter negate sintf

diagnose sys mcast-session filter negate sport

Inverse source port.

diagnose sys mcast-session filter negate sport

diagnose sys mcast-session filter negate src

Inverse source IP.

diagnose sys mcast-session filter negate src

diagnose sys mcast-session filter negate vd

Inverse virtual domain.

diagnose sys mcast-session filter negate vd

diagnose sys mcast-session filter proto

Protocol number.

diagnose sys mcast-session filter proto <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys mcast-session filter sintf

Source interface.

diagnose sys mcast-session filter sintf <xxxx>

Parameter

Description

Type

Size

<xxxx>

Interface name.

string

diagnose sys mcast-session filter sport

Source port.

diagnose sys mcast-session filter sport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys mcast-session filter src

Source IP address.

diagnose sys mcast-session filter src <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP (from).

string

<xxx.xxx.xxx.xxx>

Source IP (to).

string

diagnose sys mcast-session filter vd

Index of virtual domain. -1 matches all.

diagnose sys mcast-session filter vd <xxx>

Parameter

Description

Type

Size

<xxx>

Index of virtual domain. -1 matches all.

string

diagnose sys mcast-session list

List session.

diagnose sys mcast-session list

diagnose sys mcast-session stat

Stat session.

diagnose sys mcast-session stat

diagnose sys mcast-session6

IPv6 multicast session.

diagnose sys mcast-session6

diagnose sys mcast-session6 clear

Clear IPv6 multicast sessions defined by filter.

diagnose sys mcast-session6 clear

diagnose sys mcast-session6 filter

List IPv6 multicast session with filters.

diagnose sys mcast-session6 filter

diagnose sys mcast-session6 filter clear

Clear IPv6 multicast session filter.

diagnose sys mcast-session6 filter clear

diagnose sys mcast-session6 filter clear dport

Clear destination port filter.

diagnose sys mcast-session6 filter clear dport

diagnose sys mcast-session6 filter clear dst

Clear destination IP filter.

diagnose sys mcast-session6 filter clear dst

diagnose sys mcast-session6 filter clear proto

Clear protocol filter.

diagnose sys mcast-session6 filter clear proto

diagnose sys mcast-session6 filter clear sintf

Clear source interface filter.

diagnose sys mcast-session6 filter clear sintf

diagnose sys mcast-session6 filter clear sport

Clear source port filter.

diagnose sys mcast-session6 filter clear sport

diagnose sys mcast-session6 filter clear src

Clear source IP filter.

diagnose sys mcast-session6 filter clear src

diagnose sys mcast-session6 filter clear vd

Clear virtual domain filter.

diagnose sys mcast-session6 filter clear vd

diagnose sys mcast-session6 filter dport

Destination port.

diagnose sys mcast-session6 filter dport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys mcast-session6 filter dst

Destination IP address.

diagnose sys mcast-session6 filter dst <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP (from).

string

<xxx.xxx.xxx.xxx>

Destination IP (to).

string

diagnose sys mcast-session6 filter negate

Inverse filter.

diagnose sys mcast-session6 filter negate

diagnose sys mcast-session6 filter negate dport

Inverse destination port.

diagnose sys mcast-session6 filter negate dport

diagnose sys mcast-session6 filter negate dst

Inverse destination IP.

diagnose sys mcast-session6 filter negate dst

diagnose sys mcast-session6 filter negate proto

Inverse protocol.

diagnose sys mcast-session6 filter negate proto

diagnose sys mcast-session6 filter negate sintf

Inverse source interface.

diagnose sys mcast-session6 filter negate sintf

diagnose sys mcast-session6 filter negate sport

Inverse source port.

diagnose sys mcast-session6 filter negate sport

diagnose sys mcast-session6 filter negate src

Inverse source IP.

diagnose sys mcast-session6 filter negate src

diagnose sys mcast-session6 filter negate vd

Inverse virtual domain.

diagnose sys mcast-session6 filter negate vd

diagnose sys mcast-session6 filter proto

Protocol number.

diagnose sys mcast-session6 filter proto <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys mcast-session6 filter sintf

Source interface.

diagnose sys mcast-session6 filter sintf <xxxxx>

Parameter

Description

Type

Size

<xxxxx>

Interface name.

string

diagnose sys mcast-session6 filter sport

Source port.

diagnose sys mcast-session6 filter sport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys mcast-session6 filter src

Source IP address.

diagnose sys mcast-session6 filter src <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP (from).

string

<xxx.xxx.xxx.xxx>

Source IP (to).

string

diagnose sys mcast-session6 filter vd

Index of virtual domain. -1 matches all.

diagnose sys mcast-session6 filter vd <xxx>

Parameter

Description

Type

Size

<xxx>

Index of virtual domain. -1 matches all.

string

diagnose sys mcast-session6 list

List IPv6 multicast session.

diagnose sys mcast-session6 list

diagnose sys mcast-session6 stat

Stat IPv6 multicast session.

diagnose sys mcast-session6 stat

diagnose sys modem

modem

diagnose sys modem

diagnose sys modem cmd

cmd

diagnose sys modem cmd <at>

Parameter

Description

Type

Size

<at>

AT command for MODEM.

string

diagnose sys modem com

Start a interactive session.

diagnose sys modem com

diagnose sys modem detect

detect

diagnose sys modem detect

diagnose sys modem external-modem

Show external MODEM information.

diagnose sys modem external-modem

diagnose sys modem history

List MODEM usage history.

diagnose sys modem history

diagnose sys modem query

Query information from external MODEM.

diagnose sys modem query <[0|1]>

Parameter

Description

Type

Size

<[0|1]>

1 to force re-query via AT command.

string

diagnose sys modem reset

Reset serial driver from external MODEM.

diagnose sys modem reset

diagnose sys mpstat

mpstat

diagnose sys mpstat <value> <value>

Parameter

Description

Type

Size

<value>

Delay in seconds (default 5).

string

<value>

Loop times (default = 1,000,000).

string

diagnose sys mvl

Marvell

diagnose sys mvl

diagnose sys mvl clear

Clear switch port counters

diagnose sys mvl clear

diagnose sys mvl cli

Enter CPSS command line

diagnose sys mvl cli

diagnose sys mvl config

Show switch port configurations

diagnose sys mvl config

diagnose sys mvl counters

Show switch port counters

diagnose sys mvl counters

diagnose sys mvl flow

Dump of all flow-control related information

diagnose sys mvl flow

diagnose sys mvl log

Show CPSS log

diagnose sys mvl log

diagnose sys mvl packet-trace

Show device packet counters

diagnose sys mvl packet-trace

diagnose sys mvl sharedmem

Show shared memory

diagnose sys mvl sharedmem

diagnose sys mvl stats

Show API stats

diagnose sys mvl stats

diagnose sys mvl status

Show interface PHY parameters and status

diagnose sys mvl status

diagnose sys mvl tail-drop

Dump of all tail-drop related information

diagnose sys mvl tail-drop

diagnose sys mvl tail-drop-buff

Show current number of allocated buffers per port, per traffic class

diagnose sys mvl tail-drop-buff

diagnose sys mvl tail-drop-desc

Show current number of allocated descriptors per port, per traffic class

diagnose sys mvl tail-drop-desc

diagnose sys nmi-watchdog

nmi-watchdog

diagnose sys nmi-watchdog

diagnose sys nmi-watchdog disable

Disable NMI watchdog.

diagnose sys nmi-watchdog disable

diagnose sys nmi-watchdog enable

Enable NMI watchdog.

diagnose sys nmi-watchdog enable

diagnose sys ntp

NTP daemon command.

diagnose sys ntp

diagnose sys ntp status

List NTP servers information.

diagnose sys ntp status

diagnose sys pair

Pair device.

diagnose sys pair

diagnose sys platform

Platform information.

diagnose sys platform

diagnose sys platform info

Information.

diagnose sys platform info

diagnose sys print-conserve-info

Print all conserve related info.

diagnose sys print-conserve-info

diagnose sys process

Dump process stack.

diagnose sys process

diagnose sys process daemon-auto-restart

Set daemon respawn behaviour.

diagnose sys process daemon-auto-restart <action> <daemon>

Parameter

Description

Type

Size

<action>

(enable|disable)

string

<daemon>

Daemon name.

string

diagnose sys process dump

Dump process kernel stack.

diagnose sys process dump <pid>

Parameter

Description

Type

Size

<pid>

PID of the process to dump.

string

diagnose sys process nameof

List name of process with a specific PID.

diagnose sys process nameof <integer>

Parameter

Description

Type

Size

<integer>

PID to find the process name.

string

diagnose sys process pidof

List PIDs of processes with a specific name.

diagnose sys process pidof <string>

Parameter

Description

Type

Size

<string>

Name to find PIDs for.

string

diagnose sys process pstack

Dump process userspace stack.

diagnose sys process pstack <pid>

Parameter

Description

Type

Size

<pid>

PID of the process to dump.

string

diagnose sys process sock-mem

Show process socket mem usage.

diagnose sys process sock-mem

diagnose sys process socket

Find PID of processes which owns the socket.

diagnose sys process socket <socket-inode>

Parameter

Description

Type

Size

<socket-inode>

Socket to find PID for.

string

diagnose sys process trace

Sample process instructions.

diagnose sys process trace

diagnose sys profile

kernel profiling

diagnose sys profile

diagnose sys profile cpumask

profile which CPUs

diagnose sys profile cpumask

diagnose sys profile module

show kernel module

diagnose sys profile module

diagnose sys profile show

show kernel profiling result

diagnose sys profile show

diagnose sys profile show detail

show detail of kernel profiling

diagnose sys profile show detail

diagnose sys profile show order

order kernel profiling result

diagnose sys profile show order

diagnose sys profile start

start kernel profiling data

diagnose sys profile start

diagnose sys profile step

set profile step

diagnose sys profile step <Integer>

Parameter

Description

Type

Size

<Integer>

Profile step for CPU profiling. Argument should be a power of two between 2 to 32

string

diagnose sys profile stop

copy kernel profiling data

diagnose sys profile stop

diagnose sys profile sysmap

show kernel sysmap

diagnose sys profile sysmap

diagnose sys proxy

Proxy diagnostics.

diagnose sys proxy

diagnose sys proxy bypass

Bypass setting.

diagnose sys proxy bypass

diagnose sys proxy bypass clear

Clear bypass settings.

diagnose sys proxy bypass clear

diagnose sys proxy bypass disable

Disable bypass setiings.

diagnose sys proxy bypass disable

diagnose sys proxy bypass disable category

Disable category bypass.

diagnose sys proxy bypass disable category

diagnose sys proxy bypass disable category all

Bypass all.

diagnose sys proxy bypass disable category all

diagnose sys proxy bypass disable category scanunit-submission

Bypass scanunit submission.

diagnose sys proxy bypass disable category scanunit-submission

diagnose sys proxy bypass disable category ssl

Bypass SSL (no crypto, no utm).

diagnose sys proxy bypass disable category ssl

diagnose sys proxy bypass disable category utm

Bypass UTM (crypto, no utm).

diagnose sys proxy bypass disable category utm

diagnose sys proxy bypass disable protocol

Disable protocol bypass.

diagnose sys proxy bypass disable protocol

diagnose sys proxy bypass disable protocol all

All proxy protocols

diagnose sys proxy bypass disable protocol all

diagnose sys proxy bypass disable protocol ftp

FTP(S) protocol

diagnose sys proxy bypass disable protocol ftp

diagnose sys proxy bypass disable protocol imap

IMAP(S) protocol

diagnose sys proxy bypass disable protocol imap

diagnose sys proxy bypass disable protocol nntp

NNTP protocol

diagnose sys proxy bypass disable protocol nntp

diagnose sys proxy bypass disable protocol pop3

POP3(S) protocol

diagnose sys proxy bypass disable protocol pop3

diagnose sys proxy bypass disable protocol smtp

SMTP(S) protocol

diagnose sys proxy bypass disable protocol smtp

diagnose sys proxy bypass enable

Enable bypass settings.

diagnose sys proxy bypass enable

diagnose sys proxy bypass enable category

Enable category bypass.

diagnose sys proxy bypass enable category

diagnose sys proxy bypass enable category all

Bypass all.

diagnose sys proxy bypass enable category all

diagnose sys proxy bypass enable category scanunit-submission

Bypass scanunit submission.

diagnose sys proxy bypass enable category scanunit-submission

diagnose sys proxy bypass enable category ssl

Bypass SSL (no crypto, no utm).

diagnose sys proxy bypass enable category ssl

diagnose sys proxy bypass enable category utm

Bypass UTM (crypto, no utm).

diagnose sys proxy bypass enable category utm

diagnose sys proxy bypass enable protocol

Enable protocol bypass.

diagnose sys proxy bypass enable protocol

diagnose sys proxy bypass enable protocol all

All proxy protocols

diagnose sys proxy bypass enable protocol all

diagnose sys proxy bypass enable protocol ftp

FTP(S) protocol

diagnose sys proxy bypass enable protocol ftp

diagnose sys proxy bypass enable protocol imap

IMAP(S) protocol

diagnose sys proxy bypass enable protocol imap

diagnose sys proxy bypass enable protocol nntp

NNTP protocol

diagnose sys proxy bypass enable protocol nntp

diagnose sys proxy bypass enable protocol pop3

POP3(S) protocol

diagnose sys proxy bypass enable protocol pop3

diagnose sys proxy bypass enable protocol smtp

SMTP(S) protocol

diagnose sys proxy bypass enable protocol smtp

diagnose sys proxy bypass show

Show bypass settings.

diagnose sys proxy bypass show

diagnose sys proxy certificate-blocklist

Certificate blocklist diagnostics.

diagnose sys proxy certificate-blocklist

diagnose sys proxy certificate-blocklist flush

Flush certificate blocklist database.

diagnose sys proxy certificate-blocklist flush

diagnose sys proxy certificate-blocklist status

Display per worker certificate blocklist status.

diagnose sys proxy certificate-blocklist status

diagnose sys proxy debug-filter

Filter for displaying debug information.

diagnose sys proxy debug-filter

diagnose sys proxy debug-filter clear

Erase the current filter.

diagnose sys proxy debug-filter clear

diagnose sys proxy debug-filter list

Display the current filter.

diagnose sys proxy debug-filter list

diagnose sys proxy debug-filter src

Source address range to filter by.

diagnose sys proxy debug-filter src <ip-address> <ip-address>

Parameter

Description

Type

Size

<ip-address>

Source IP address (from).

string

<ip-address>

Source IP address (to).

string

diagnose sys proxy filter

Diagnostics filter.

diagnose sys proxy filter

diagnose sys proxy filter clear

Clear the current filter.

diagnose sys proxy filter clear

diagnose sys proxy filter list

Display the current filter.

diagnose sys proxy filter list

diagnose sys proxy filter negate

Negate the specified filter parameter.

diagnose sys proxy filter negate

diagnose sys proxy filter negate vd

Negate virtual domain.

diagnose sys proxy filter negate vd

diagnose sys proxy filter negate worker

Negate worker ID.

diagnose sys proxy filter negate worker

diagnose sys proxy filter vd

Index of virtual domain. -1 matches all.

diagnose sys proxy filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys proxy filter worker

ID of worker or "m" for manager. Invalid ID matches all.

diagnose sys proxy filter worker <id>

Parameter

Description

Type

Size

<id>

ID of worker or "m" for manager. Invalid ID matches all.

string

diagnose sys proxy log

Logging diagnostics.

diagnose sys proxy log

diagnose sys proxy log filter

Debug log filter.

diagnose sys proxy log filter

diagnose sys proxy log filter clear

Clear the current filter.

diagnose sys proxy log filter clear

diagnose sys proxy log filter list

Display the current filter.

diagnose sys proxy log filter list

diagnose sys proxy log filter negate

Negate the specified filter parameter.

diagnose sys proxy log filter negate

diagnose sys proxy log filter negate vd

Negate virtual domain.

diagnose sys proxy log filter negate vd

diagnose sys proxy log filter negate worker

Negate worker ID.

diagnose sys proxy log filter negate worker

diagnose sys proxy log filter vd

Index of virtual domain. -1 matches all.

diagnose sys proxy log filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys proxy log filter worker

ID of worker or "m" for manager. Invalid ID matches all.

diagnose sys proxy log filter worker <id>

Parameter

Description

Type

Size

<id>

ID of worker or "m" for manager. Invalid ID matches all.

string

diagnose sys proxy log-debug

Enable/disable sys proxy log on console.

diagnose sys proxy log-debug <integer>

Parameter

Description

Type

Size

<integer>

Enable/disable log on console, 0 off, otherwise, on.

string

diagnose sys proxy memory

Memory configuration

diagnose sys proxy memory

diagnose sys proxy memory allocator

Show the current memory allocator

diagnose sys proxy memory allocator

diagnose sys proxy memory conserve

Enter/exit conserve mode.

diagnose sys proxy memory conserve

diagnose sys proxy memory conserve enter

Enter conserve mode.

diagnose sys proxy memory conserve enter

diagnose sys proxy memory conserve exit

Exit conserve mode.

diagnose sys proxy memory conserve exit

diagnose sys proxy memory jemalloc

Use jemalloc for memory allocation

diagnose sys proxy memory jemalloc

diagnose sys proxy memory malloc

Use malloc for memory allocation

diagnose sys proxy memory malloc

diagnose sys proxy memory usage

Per-worker memory allocation statistics

diagnose sys proxy memory usage

diagnose sys proxy restart

Restart proxy.

diagnose sys proxy restart

diagnose sys proxy simulate-error

Error test options.

diagnose sys proxy simulate-error

diagnose sys proxy simulate-error scan-drop

Enable/disable proxy error scan drop.

diagnose sys proxy simulate-error scan-drop

diagnose sys proxy simulate-error scan-drop disable

Disable scan-drop (default)

diagnose sys proxy simulate-error scan-drop disable

diagnose sys proxy simulate-error scan-drop enable

Enable scan-drop

diagnose sys proxy simulate-error scan-drop enable

diagnose sys proxy simulate-error status

Display per worker error test options.

diagnose sys proxy simulate-error status

diagnose sys proxy socket-options

Socket options configuration

diagnose sys proxy socket-options

diagnose sys proxy socket-options linger

SO_LINGER socket option

diagnose sys proxy socket-options linger

diagnose sys proxy socket-options linger disable

Disable SO_LINGER

diagnose sys proxy socket-options linger disable

diagnose sys proxy socket-options linger enable

Enable SO_LINGER

diagnose sys proxy socket-options linger enable

diagnose sys proxy socket-options nagle

SSL TCP_NODELAY socket option

diagnose sys proxy socket-options nagle

diagnose sys proxy socket-options nagle disable

Disable TCP_NODELAY for SSL connections (Default)

diagnose sys proxy socket-options nagle disable

diagnose sys proxy socket-options nagle enable

Enable TCP_NODELAY for SSL connections

diagnose sys proxy socket-options nagle enable

diagnose sys proxy socket-options status

Display per worker socket options

diagnose sys proxy socket-options status

diagnose sys proxy ssl

SSL options

diagnose sys proxy ssl

diagnose sys proxy ssl bypass

Ssl bypass cache

diagnose sys proxy ssl bypass

diagnose sys proxy ssl bypass flush

Flush ssl bypass cache

diagnose sys proxy ssl bypass flush

diagnose sys proxy ssl bypass list

List ssl bypass cache

diagnose sys proxy ssl bypass list

diagnose sys proxy ssl crypto

Set hardware crypto mode

diagnose sys proxy ssl crypto

diagnose sys proxy ssl crypto async

Asynchronous hardware crypto

diagnose sys proxy ssl crypto async

diagnose sys proxy ssl crypto sync

Synchronous hardware crypto

diagnose sys proxy ssl crypto sync

diagnose sys proxy ssl exempt

Ssl exempt cache

diagnose sys proxy ssl exempt

diagnose sys proxy ssl exempt flush

Flush ssl exempt cache

diagnose sys proxy ssl exempt flush

diagnose sys proxy ssl exempt list

List ssl exempt cache

diagnose sys proxy ssl exempt list

diagnose sys proxy ssl rsa-blinding

Set RSA blinding

diagnose sys proxy ssl rsa-blinding

diagnose sys proxy ssl rsa-blinding off

RSA blinding off

diagnose sys proxy ssl rsa-blinding off

diagnose sys proxy ssl rsa-blinding on

RSA blinding on

diagnose sys proxy ssl rsa-blinding on

diagnose sys proxy ssl session

List of current SSL sessions

diagnose sys proxy ssl session

diagnose sys proxy stats

Proxy statistics.

diagnose sys proxy stats

diagnose sys proxy stats all

Per-process proxy statistics.

diagnose sys proxy stats all

diagnose sys proxy stats clear

Clear proxy statistics.

diagnose sys proxy stats clear

diagnose sys proxy stats debug

Debug sink statistics

diagnose sys proxy stats debug

diagnose sys proxy stats list

Summarized proxy statistics.

diagnose sys proxy stats list

diagnose sys proxy stats protocol

Per-process proxy worker protocol statistics.

diagnose sys proxy stats protocol

diagnose sys proxy stats vdom

Proxy vdom statistics.

diagnose sys proxy stats vdom

diagnose sys proxy stats vdom all

Proxy per-vdom statistics.

diagnose sys proxy stats vdom all

diagnose sys proxy stats vdom list

List current vdoms.

diagnose sys proxy stats vdom list

diagnose sys proxy stats vdom summary

Summarized vdom proxy statistics.

diagnose sys proxy stats vdom summary

diagnose sys proxy valgrind

Valgrind analysis.

diagnose sys proxy valgrind

diagnose sys proxy valgrind disable

Force daemon to restart.

diagnose sys proxy valgrind disable

diagnose sys proxy valgrind enable

Force daemon to restart.

diagnose sys proxy valgrind enable

diagnose sys proxy valgrind log

Valgrind logs.

diagnose sys proxy valgrind log

diagnose sys proxy valgrind log clear

Clear logs.

diagnose sys proxy valgrind log clear

diagnose sys proxy valgrind log show

Show logs.

diagnose sys proxy valgrind log show

diagnose sys proxy valgrind memcheck

Force daemon to restart.

diagnose sys proxy valgrind memcheck

diagnose sys proxy valgrind memcheck_less

Force daemon to restart.

diagnose sys proxy valgrind memcheck_less

diagnose sys proxy valgrind status

Show valgrind status.

diagnose sys proxy valgrind status

diagnose sys ptp

PTP daemon command.

diagnose sys ptp

diagnose sys ptp status

List PTP information.

diagnose sys ptp status

diagnose sys route_tag

route-tag.

diagnose sys route_tag

diagnose sys route_tag flush

Flush route tag address.

diagnose sys route_tag flush <route-tag>

Parameter

Description

Type

Size

<route-tag>

Flush cache of route-tag address in SD-WAN.

string

diagnose sys route_tag list

Show route tag address.

diagnose sys route_tag list <route-tag>

Parameter

Description

Type

Size

<route-tag>

Show details of route-tag address.

string

diagnose sys route_tag summary

route tag address summary.

diagnose sys route_tag summary

diagnose sys saml

SAML diagnostics.

diagnose sys saml

diagnose sys saml metadata

Test metadata.

diagnose sys saml metadata

diagnose sys scanunit

Scanunit diagnostics.

diagnose sys scanunit

diagnose sys scanunit auto-restart

Auto-restart settings.

diagnose sys scanunit auto-restart

diagnose sys scanunit auto-restart requests

Number of scan requests before restarting.

diagnose sys scanunit auto-restart requests <Integer>

Parameter

Description

Type

Size

<Integer>

Number of requests before restarting (0 disables auto restart).

string

diagnose sys scanunit auto-restart reset

Reset auto restart settings.

diagnose sys scanunit auto-restart reset

diagnose sys scanunit auto-restart status

Show auto restart settings.

diagnose sys scanunit auto-restart status

diagnose sys scanunit auto-restart time

Minimum interval in seconds between restarting workers.

diagnose sys scanunit auto-restart time <Integer>

Parameter

Description

Type

Size

<Integer>

Minimum interval in seconds between restarting workers.

string

diagnose sys scanunit av-filetype-reuse

Enable/disable AV filetype reuse.

diagnose sys scanunit av-filetype-reuse

diagnose sys scanunit av-filetype-reuse disable

Disable scanunit AV filetype reuse.

diagnose sys scanunit av-filetype-reuse disable

diagnose sys scanunit av-filetype-reuse enable

Enable scanunit AV filetype reuse.

diagnose sys scanunit av-filetype-reuse enable

diagnose sys scanunit bypass

Bypass setting.

diagnose sys scanunit bypass

diagnose sys scanunit bypass clear

Clear bypass settings.

diagnose sys scanunit bypass clear

diagnose sys scanunit bypass disable

Disable bypass setiings.

diagnose sys scanunit bypass disable

diagnose sys scanunit bypass disable category

Disable category bypass.

diagnose sys scanunit bypass disable category

diagnose sys scanunit bypass disable category all

Bypass all.

diagnose sys scanunit bypass disable category all

diagnose sys scanunit bypass disable category av-engine

Bypass AV engine.

diagnose sys scanunit bypass disable category av-engine

diagnose sys scanunit bypass disable category scanunit

Bypass scanunit.

diagnose sys scanunit bypass disable category scanunit

diagnose sys scanunit bypass disable protocol

Disable protocol bypass.

diagnose sys scanunit bypass disable protocol

diagnose sys scanunit bypass disable protocol all

All proxy protocols

diagnose sys scanunit bypass disable protocol all

diagnose sys scanunit bypass disable protocol cifs

CIFS protocol

diagnose sys scanunit bypass disable protocol cifs

diagnose sys scanunit bypass disable protocol ftp

FTP(S) protocol

diagnose sys scanunit bypass disable protocol ftp

diagnose sys scanunit bypass disable protocol http

HTTP(S) protocol

diagnose sys scanunit bypass disable protocol http

diagnose sys scanunit bypass disable protocol imap

IMAP(S) protocol

diagnose sys scanunit bypass disable protocol imap

diagnose sys scanunit bypass disable protocol nntp

NNTP protocol

diagnose sys scanunit bypass disable protocol nntp

diagnose sys scanunit bypass disable protocol pop3

POP3(S) protocol

diagnose sys scanunit bypass disable protocol pop3

diagnose sys scanunit bypass disable protocol smtp

SMTP(S) protocol

diagnose sys scanunit bypass disable protocol smtp

diagnose sys scanunit bypass enable

Enable bypass settings.

diagnose sys scanunit bypass enable

diagnose sys scanunit bypass enable category

Enable category bypass.

diagnose sys scanunit bypass enable category

diagnose sys scanunit bypass enable category all

Bypass all.

diagnose sys scanunit bypass enable category all

diagnose sys scanunit bypass enable category av-engine

Bypass AV engine.

diagnose sys scanunit bypass enable category av-engine

diagnose sys scanunit bypass enable category scanunit

Bypass scanunit.

diagnose sys scanunit bypass enable category scanunit

diagnose sys scanunit bypass enable protocol

Enable protocol bypass.

diagnose sys scanunit bypass enable protocol

diagnose sys scanunit bypass enable protocol all

All proxy protocols

diagnose sys scanunit bypass enable protocol all

diagnose sys scanunit bypass enable protocol cifs

CIFS protocol

diagnose sys scanunit bypass enable protocol cifs

diagnose sys scanunit bypass enable protocol ftp

FTP(S) protocol

diagnose sys scanunit bypass enable protocol ftp

diagnose sys scanunit bypass enable protocol http

HTTP(S) protocol

diagnose sys scanunit bypass enable protocol http

diagnose sys scanunit bypass enable protocol imap

IMAP(S) protocol

diagnose sys scanunit bypass enable protocol imap

diagnose sys scanunit bypass enable protocol nntp

NNTP protocol

diagnose sys scanunit bypass enable protocol nntp

diagnose sys scanunit bypass enable protocol pop3

POP3(S) protocol

diagnose sys scanunit bypass enable protocol pop3

diagnose sys scanunit bypass enable protocol smtp

SMTP(S) protocol

diagnose sys scanunit bypass enable protocol smtp

diagnose sys scanunit bypass show

Show bypass settings.

diagnose sys scanunit bypass show

diagnose sys scanunit cfg

Cached configuration.

diagnose sys scanunit cfg

diagnose sys scanunit cfg clear

Clear cached configuration.

diagnose sys scanunit cfg clear

diagnose sys scanunit cfg list

List the key for each cached configuration entry.

diagnose sys scanunit cfg list

diagnose sys scanunit crash-dump

Enable/disable crash dump.

diagnose sys scanunit crash-dump

diagnose sys scanunit crash-dump clear

Clear scanunit crash dump.

diagnose sys scanunit crash-dump clear

diagnose sys scanunit crash-dump disable

Disable scanunit crash dump.

diagnose sys scanunit crash-dump disable

diagnose sys scanunit crash-dump enable

Enable scanunit crash dump.

diagnose sys scanunit crash-dump enable

diagnose sys scanunit crash-dump read

Read the last crash dump.

diagnose sys scanunit crash-dump read

diagnose sys scanunit debug

Debug settings.

diagnose sys scanunit debug

diagnose sys scanunit debug all

Enable all debug categories.

diagnose sys scanunit debug all <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug analytics

Enable analytics category.

diagnose sys scanunit debug analytics <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug antispam

Enable antispam category.

diagnose sys scanunit debug antispam <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug daemon

Enable scanunit daemon category.

diagnose sys scanunit debug daemon <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug dlp

Enable DLP category.

diagnose sys scanunit debug dlp <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug file-filter

Enable file filter category.

diagnose sys scanunit debug file-filter <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug icb

Enable ICB category.

diagnose sys scanunit debug icb <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug job

Enable scanunit job category.

diagnose sys scanunit debug job <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug level

Set debug level.

diagnose sys scanunit debug level

diagnose sys scanunit debug level error

Error level.

diagnose sys scanunit debug level error

diagnose sys scanunit debug level info

Info level.

diagnose sys scanunit debug level info

diagnose sys scanunit debug level verbose

Verbose level.

diagnose sys scanunit debug level verbose

diagnose sys scanunit debug level warning

Warning level.

diagnose sys scanunit debug level warning

diagnose sys scanunit debug outbreak-prevention

Enable outbreak prevention category.

diagnose sys scanunit debug outbreak-prevention <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug quarantine

Enable quarantine category.

diagnose sys scanunit debug quarantine <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug reset

Reset debug category and level.

diagnose sys scanunit debug reset

diagnose sys scanunit debug sane

Enable a sane group of categories.

diagnose sys scanunit debug sane <status>

Parameter

Description

Type

Size

<status>

Enable or disable debug category.

string

diagnose sys scanunit debug show

Show current debug settings.

diagnose sys scanunit debug show

diagnose sys scanunit dlp

DLP data size scanning threshold settings.

diagnose sys scanunit dlp

diagnose sys scanunit dlp reset

Reset DLP data size scanning threshold value.

diagnose sys scanunit dlp reset

diagnose sys scanunit dlp status

Show DLP data size scanning threshold value.

diagnose sys scanunit dlp status

diagnose sys scanunit dlp threshold

Set DLP data size scanning threshold in bytes (0 = default).

diagnose sys scanunit dlp threshold <Integer>

Parameter

Description

Type

Size

<Integer>

DLP data size scanning threshold.

string

diagnose sys scanunit file-hash

File hash list.

diagnose sys scanunit file-hash

diagnose sys scanunit file-hash list

List malware hashes.

diagnose sys scanunit file-hash list

diagnose sys scanunit file-hash list all

List all malware hashes.

diagnose sys scanunit file-hash list all

diagnose sys scanunit file-hash list md5

List md5 malware hashes.

diagnose sys scanunit file-hash list md5

diagnose sys scanunit file-hash list sha1

List sha1 malware hashes.

diagnose sys scanunit file-hash list sha1

diagnose sys scanunit file-hash list sha256

List sha256 malware hashes.

diagnose sys scanunit file-hash list sha256

diagnose sys scanunit file-hash query

Query a malware hash.

diagnose sys scanunit file-hash query

diagnose sys scanunit file-hash query md5

Query an md5 malware hash.

diagnose sys scanunit file-hash query md5 <value>

Parameter

Description

Type

Size

<value>

md5 hash

string

diagnose sys scanunit file-hash query sha1

Query a sha1 malware hash.

diagnose sys scanunit file-hash query sha1 <value>

Parameter

Description

Type

Size

<value>

sha1 hash

string

diagnose sys scanunit file-hash query sha256

Query a sha256 malware hash.

diagnose sys scanunit file-hash query sha256 <value>

Parameter

Description

Type

Size

<value>

sha256 hash

string

diagnose sys scanunit file-hash status

File hash database status.

diagnose sys scanunit file-hash status

diagnose sys scanunit filter

Diagnostics filter.

diagnose sys scanunit filter

diagnose sys scanunit filter clear

Clear the current filter.

diagnose sys scanunit filter clear

diagnose sys scanunit filter list

Display the current filter.

diagnose sys scanunit filter list

diagnose sys scanunit filter negate

Negate the specified filter parameter.

diagnose sys scanunit filter negate

diagnose sys scanunit filter negate vd

Negate virtual domain.

diagnose sys scanunit filter negate vd

diagnose sys scanunit filter negate worker

Negate worker ID.

diagnose sys scanunit filter negate worker

diagnose sys scanunit filter vd

Index of virtual domain. -1 matches all.

diagnose sys scanunit filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys scanunit filter worker

ID of worker or "m" for manager. Invalid ID matches all.

diagnose sys scanunit filter worker <id>

Parameter

Description

Type

Size

<id>

ID of worker or "m" for manager. Invalid ID matches all.

string

diagnose sys scanunit log

Logging diagnostics.

diagnose sys scanunit log

diagnose sys scanunit log filter

Debug log filter.

diagnose sys scanunit log filter

diagnose sys scanunit log filter clear

Clear the current filter.

diagnose sys scanunit log filter clear

diagnose sys scanunit log filter list

Display the current filter.

diagnose sys scanunit log filter list

diagnose sys scanunit log filter negate

Negate the specified filter parameter.

diagnose sys scanunit log filter negate

diagnose sys scanunit log filter negate vd

Negate virtual domain.

diagnose sys scanunit log filter negate vd

diagnose sys scanunit log filter negate worker

Negate worker ID.

diagnose sys scanunit log filter negate worker

diagnose sys scanunit log filter vd

Index of virtual domain. -1 matches all.

diagnose sys scanunit log filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys scanunit log filter worker

ID of worker or "m" for manager. Invalid ID matches all.

diagnose sys scanunit log filter worker <id>

Parameter

Description

Type

Size

<id>

ID of worker or "m" for manager. Invalid ID matches all.

string

diagnose sys scanunit memory

Memory configuration

diagnose sys scanunit memory

diagnose sys scanunit memory conserve

Enter/exit conserve mode.

diagnose sys scanunit memory conserve

diagnose sys scanunit memory conserve enter

Enter conserve mode.

diagnose sys scanunit memory conserve enter

diagnose sys scanunit memory conserve exit

Exit conserve mode.

diagnose sys scanunit memory conserve exit

diagnose sys scanunit reload-avdb

Reload AVDB.

diagnose sys scanunit reload-avdb

diagnose sys scanunit reload-aveng

Reload AV engine.

diagnose sys scanunit reload-aveng

diagnose sys scanunit reload-fsa-ext

Reload FSA extensions list.

diagnose sys scanunit reload-fsa-ext

diagnose sys scanunit restart

Restart scanunit.

diagnose sys scanunit restart <which>

Parameter

Description

Type

Size

<which>

Worker id to restart. Or 'all' for all processes.

string

diagnose sys scanunit simulate-crash

Simulate scanunit crashes.

diagnose sys scanunit simulate-crash

diagnose sys scanunit simulate-crash lockup-workers

Simulate locked up scanunit workers.

diagnose sys scanunit simulate-crash lockup-workers

diagnose sys scanunit simulate-crash lockup-workers all

Lock up all workers.

diagnose sys scanunit simulate-crash lockup-workers all

diagnose sys scanunit simulate-crash lockup-workers worker

Lock up worker <id>.

diagnose sys scanunit simulate-crash lockup-workers worker <id>

Parameter

Description

Type

Size

<id>

ID of worker to lock up.

string

diagnose sys scanunit simulate-error

Simulate scanunit errors.

diagnose sys scanunit simulate-error

diagnose sys scanunit simulate-error av-engine-delay

Add delay in AV engine filetype callback

diagnose sys scanunit simulate-error av-engine-delay <Integer>

Parameter

Description

Type

Size

<Integer>

Delay (in seconds) to introduce in AV engine filetype callback

string

diagnose sys scanunit simulate-error av-error

Simulate AV engine error codes

diagnose sys scanunit simulate-error av-error <Integer>

Parameter

Description

Type

Size

<Integer>

AV engine error code, interpreted as bitmask.

string

diagnose sys scanunit simulate-error av-status

Simulate AV engine status codes.

diagnose sys scanunit simulate-error av-status <Integer>

Parameter

Description

Type

Size

<Integer>

AV engine status code. (-1 == INFECTED_ERROR, 1 == INFECTED_VIRUS, etc.)

string

diagnose sys scanunit simulate-error cdr-error

Simulate CDR engine internal error when active content detected.

diagnose sys scanunit simulate-error cdr-error

diagnose sys scanunit simulate-error reset

Reset all error simulation settings.

diagnose sys scanunit simulate-error reset

diagnose sys scanunit simulate-error scan-error-code

Simulate scanunit scan error.

diagnose sys scanunit simulate-error scan-error-code <Integer>

Parameter

Description

Type

Size

<Integer>

Scanunit error code (negated) (e.g., 0 = none, 3 = invalid infection pointer, 5 = scanunit crash).

string

diagnose sys scanunit simulate-error status

Show error simulation settings.

diagnose sys scanunit simulate-error status

diagnose sys scanunit stats

Statistics.

diagnose sys scanunit stats

diagnose sys scanunit stats all

Per-process statistics.

diagnose sys scanunit stats all

diagnose sys scanunit stats clear

Clear all statistics.

diagnose sys scanunit stats clear

diagnose sys scanunit stats crash

Crash process statistics.

diagnose sys scanunit stats crash

diagnose sys scanunit stats forker

scanunit forker statistics.

diagnose sys scanunit stats forker

diagnose sys scanunit stats list

List statistics.

diagnose sys scanunit stats list

diagnose sys scanunit stats manager

scanunit manager statistics.

diagnose sys scanunit stats manager

diagnose sys scanunit stats worker

scanunit worker statistics.

diagnose sys scanunit stats worker

diagnose sys scanunit valgrind

Valgrind analysis.

diagnose sys scanunit valgrind

diagnose sys scanunit valgrind disable

Force daemon to restart.

diagnose sys scanunit valgrind disable

diagnose sys scanunit valgrind enable

Force daemon to restart.

diagnose sys scanunit valgrind enable

diagnose sys scanunit valgrind log

Valgrind logs.

diagnose sys scanunit valgrind log

diagnose sys scanunit valgrind log clear

Clear logs.

diagnose sys scanunit valgrind log clear

diagnose sys scanunit valgrind log show

Show logs.

diagnose sys scanunit valgrind log show

diagnose sys scanunit valgrind memcheck

Force daemon to restart.

diagnose sys scanunit valgrind memcheck

diagnose sys scanunit valgrind memcheck_less

Force daemon to restart.

diagnose sys scanunit valgrind memcheck_less

diagnose sys scanunit valgrind status

Show valgrind status.

diagnose sys scanunit valgrind status

diagnose sys scanunit vdom-stats

Current VDOM statistics.

diagnose sys scanunit vdom-stats

diagnose sys scanunit vdom-stats all

List all VDOM statistics.

diagnose sys scanunit vdom-stats all

diagnose sys scanunit vdom-stats clear

Clear current VDOM statistics.

diagnose sys scanunit vdom-stats clear

diagnose sys scanunit vdom-stats clear-all

Clear all VDOM statistics.

diagnose sys scanunit vdom-stats clear-all

diagnose sys scanunit vdom-stats list

List current VDOM statistics.

diagnose sys scanunit vdom-stats list

diagnose sys scanunit watchdog-override

Configure scanunit manager watchdog override.

diagnose sys scanunit watchdog-override

diagnose sys scanunit watchdog-override disable

Disable watchdog override.

diagnose sys scanunit watchdog-override disable

diagnose sys scanunit watchdog-override enable

Enable watchdog override.

diagnose sys scanunit watchdog-override enable

diagnose sys scanunit watchdog-override interval

Set watchdog override interval.

diagnose sys scanunit watchdog-override interval <time>

Parameter

Description

Type

Size

<time>

Override interval (sec) for worker watchdog.

string

diagnose sys sccp-proxy

SCCP proxy diagnostics.

diagnose sys sccp-proxy

diagnose sys sccp-proxy debug-console

Debug consoles.

diagnose sys sccp-proxy debug-console

diagnose sys sccp-proxy phone

SCCP phones.

diagnose sys sccp-proxy phone

diagnose sys sccp-proxy phone list

List SCCP phones.

diagnose sys sccp-proxy phone list

diagnose sys sccp-proxy redirect

Redirects

diagnose sys sccp-proxy redirect

diagnose sys sccp-proxy redirect list

List SIP redirects.

diagnose sys sccp-proxy redirect list

diagnose sys sccp-proxy restart

Restart SIP and SCCP.

diagnose sys sccp-proxy restart

diagnose sys sccp-proxy stats

SCCP statistics.

diagnose sys sccp-proxy stats

diagnose sys sccp-proxy stats clear

Clear SCCP statistics.

diagnose sys sccp-proxy stats clear

diagnose sys sccp-proxy stats list

List SCCP statistics.

diagnose sys sccp-proxy stats list

diagnose sys sccp-proxy stats mem

Memory usage.

diagnose sys sccp-proxy stats mem

diagnose sys sccp-proxy stats mem full

Memory usage details.

diagnose sys sccp-proxy stats mem full

diagnose sys sccp-proxy stats mem summary

Memory usage summary.

diagnose sys sccp-proxy stats mem summary

diagnose sys sccp-proxy stats proto

SCCP proxy general protocol statistics summary.

diagnose sys sccp-proxy stats proto

diagnose sys sccp-proxy valgrind

Valgrind analysis.

diagnose sys sccp-proxy valgrind

diagnose sys sccp-proxy valgrind disable

Force daemon to restart.

diagnose sys sccp-proxy valgrind disable

diagnose sys sccp-proxy valgrind enable

Force daemon to restart.

diagnose sys sccp-proxy valgrind enable

diagnose sys sccp-proxy valgrind log

Valgrind logs.

diagnose sys sccp-proxy valgrind log

diagnose sys sccp-proxy valgrind log clear

Clear logs.

diagnose sys sccp-proxy valgrind log clear

diagnose sys sccp-proxy valgrind log show

Show logs.

diagnose sys sccp-proxy valgrind log show

diagnose sys sccp-proxy valgrind memcheck

Force daemon to restart.

diagnose sys sccp-proxy valgrind memcheck

diagnose sys sccp-proxy valgrind memcheck_less

Force daemon to restart.

diagnose sys sccp-proxy valgrind memcheck_less

diagnose sys sccp-proxy valgrind status

Show valgrind status.

diagnose sys sccp-proxy valgrind status

diagnose sys sdn

SDN Connector diagnostics.

diagnose sys sdn

diagnose sys sdn cache

Show SDN Connector cache.

diagnose sys sdn cache <sdn-data-type> <sdn-connector-name>

Parameter

Description

Type

Size

<sdn-data-type>

Specify the data type of the SDN Connector: address/service.

string

<sdn-connector-name>

Specify the name of the SDN connector.

string

diagnose sys sdn status

Show SDN Connector status.

diagnose sys sdn status <sdn-connector-name> <server-ip-address>

Parameter

Description

Type

Size

<sdn-connector-name>

Specify the name of the SDN Connector.

string

<server-ip-address>

Specify the IP address of the SDN connector.

string

diagnose sys sdwan

SD-WAN.

diagnose sys sdwan

diagnose sys sdwan advpn

Show health check info of advpn in SD-WAN.

diagnose sys sdwan advpn <num-info>

Parameter

Description

Type

Size

<num-info>

num of SDWAN members.

string

diagnose sys sdwan advpn-session

Show advpn session info.

diagnose sys sdwan advpn-session

diagnose sys sdwan health-check

Health Check.

diagnose sys sdwan health-check

diagnose sys sdwan health-check filter

Filter health-check

diagnose sys sdwan health-check filter

diagnose sys sdwan health-check filter clear

Clear all filters.

diagnose sys sdwan health-check filter clear

diagnose sys sdwan health-check filter member

Member sequence numbers <seq>.

diagnose sys sdwan health-check filter member <member>

Parameter

Description

Type

Size

<member>

Member sequence numbers.

string

diagnose sys sdwan health-check filter name

Health Check names <name>.

diagnose sys sdwan health-check filter name <name>

Parameter

Description

Type

Size

<name>

Health Check name.

string

diagnose sys sdwan health-check remote

Remote health check.

diagnose sys sdwan health-check remote <name> <seq-num>

Parameter

Description

Type

Size

<name>

Show status of the remote health check.

string

<seq-num>

Sequence number of the member.

string

diagnose sys sdwan health-check status

Health Check Status.

diagnose sys sdwan health-check status <name>

Parameter

Description

Type

Size

<name>

Show running status of the health check in SD-WAN.

string

diagnose sys sdwan internet-service-app-ctrl-3t-set

Set application control Internet Service 3T Info: ctrl-app-id, IP address, protocol & port

diagnose sys sdwan internet-service-app-ctrl-3t-set <ctrl-app-id> <ip> <proto> <port>

Parameter

Description

Type

Size

<ctrl-app-id>

ctrl app id

string

<ip>

Service IP address.

string

<proto>

Service protocol(0-255) for instance: tcp is 6

string

<port>

Service port(0-65535).

string

diagnose sys sdwan internet-service-app-ctrl-3t-unset

Unset application control Internet Service 3T Info: ctrl-app-id, IP address, protocol & port

diagnose sys sdwan internet-service-app-ctrl-3t-unset <ctrl-app-id> <ip> <proto> <port>

Parameter

Description

Type

Size

<ctrl-app-id>

ctrl app id

string

<ip>

Service IP address.

string

<proto>

Service protocol(0-255) for instance: tcp is 6

string

<port>

Service port(0-65535).

string

diagnose sys sdwan internet-service-app-ctrl-flush

Flush application control Internet Service.

diagnose sys sdwan internet-service-app-ctrl-flush

diagnose sys sdwan internet-service-app-ctrl-list

Show application control Internet Service ID list.

diagnose sys sdwan internet-service-app-ctrl-list

diagnose sys sdwan internet-service-app-ctrl-list app-id

Show application control Internet Service ID info of one given application id.

diagnose sys sdwan internet-service-app-ctrl-list app-id <app-id>

Parameter

Description

Type

Size

<app-id>

application control id.

string

diagnose sys sdwan internet-service-app-ctrl-list cat-id

Show application control Internet Service ID info of one given application category id.

diagnose sys sdwan internet-service-app-ctrl-list cat-id <cat-id>

Parameter

Description

Type

Size

<cat-id>

application category id.

string

diagnose sys sdwan internet-service-app-ctrl6-3t-set

Set application control6 Internet Service 3T Info: ctrl-app-id, IP address, protocol & port

diagnose sys sdwan internet-service-app-ctrl6-3t-set <ctrl-app-id> <ip> <proto> <port>

Parameter

Description

Type

Size

<ctrl-app-id>

ctrl app id

string

<ip>

Service IP address(Ipv6).

string

<proto>

Service protocol(0-255) for instance: tcp is 6

string

<port>

Service port(0-65535).

string

diagnose sys sdwan internet-service-app-ctrl6-3t-unset

Unset application control6 Internet Service 3T Info: ctrl-app-id, IP address, protocol & port

diagnose sys sdwan internet-service-app-ctrl6-3t-unset <ctrl-app-id> <ip> <proto> <port>

Parameter

Description

Type

Size

<ctrl-app-id>

ctrl app id

string

<ip>

Service IP address(Ipv6).

string

<proto>

Service protocol(0-255) for instance: tcp is 6

string

<port>

Service port(0-65535).

string

diagnose sys sdwan internet-service-app-ctrl6-flush

Flush application control Internet Service6.

diagnose sys sdwan internet-service-app-ctrl6-flush

diagnose sys sdwan internet-service6-app-ctrl-list

Show application control Internet Service6 ID list.

diagnose sys sdwan internet-service6-app-ctrl-list

diagnose sys sdwan internet-service6-app-ctrl-list app-id

Show application control Internet Service6 ID info of one given application id.

diagnose sys sdwan internet-service6-app-ctrl-list app-id <app-id>

Parameter

Description

Type

Size

<app-id>

application control id.

string

diagnose sys sdwan internet-service6-app-ctrl-list cat-id

Show application control Internet Service6 ID info of one given application category id.

diagnose sys sdwan internet-service6-app-ctrl-list cat-id <cat-id>

Parameter

Description

Type

Size

<cat-id>

application category id.

string

diagnose sys sdwan intf-sla-log

Show details of interface quality information.

diagnose sys sdwan intf-sla-log <name>

Parameter

Description

Type

Size

<name>

Interface name.

string

diagnose sys sdwan log

Log.

diagnose sys sdwan log <service-id>

Parameter

Description

Type

Size

<service-id>

Show details of traffic log on service in SD-WAN.

string

diagnose sys sdwan member

Member.

diagnose sys sdwan member <seq-num>

Parameter

Description

Type

Size

<seq-num>

Show details of member in SD-WAN.

string

diagnose sys sdwan neighbor

Neighbor.

diagnose sys sdwan neighbor <name>

Parameter

Description

Type

Size

<name>

Show running status of the neighbor in SD-WAN.

string

diagnose sys sdwan reset

Reset SD-WAN.

diagnose sys sdwan reset

diagnose sys sdwan route

Dump SD-WAN routes.

diagnose sys sdwan route <seq-num>

Parameter

Description

Type

Size

<seq-num>

Show details of SD-WAN routes.

string

diagnose sys sdwan route6

Dump IPv6 SD-WAN routes.

diagnose sys sdwan route6 <seq-num>

Parameter

Description

Type

Size

<seq-num>

Show details of IPv6 SD-WAN routes.

string

diagnose sys sdwan service4

IPv4 Service.

diagnose sys sdwan service4 <id>

Parameter

Description

Type

Size

<id>

Show details of IPv4 service in SD-WAN.

string

diagnose sys sdwan service6

IPv6 Service.

diagnose sys sdwan service6 <id>

Parameter

Description

Type

Size

<id>

Show details of IPv6 service in SD-WAN.

string

diagnose sys sdwan sla-log

Show details of health-check quality information in last 10 minutes

diagnose sys sdwan sla-log <name> <seq-num> <childname>

Parameter

Description

Type

Size

<name>

Health check name.

string

<seq-num>

Sequence number of the member.

string

<childname>

Child interface name.

string

diagnose sys sdwan zone

Dump sdwan zone info in kernel.

diagnose sys sdwan zone

diagnose sys server-probe

Server probe.

diagnose sys server-probe

diagnose sys server-probe response

Probe response.

diagnose sys server-probe response

diagnose sys service-communication

Show historical statistics for communication with FortiGuard services.

diagnose sys service-communication

diagnose sys session

IPv4 session.

diagnose sys session

diagnose sys session clear

Clear the sessions defined by filter.

diagnose sys session clear

diagnose sys session exp-stat

Expectation session statistics.

diagnose sys session exp-stat

diagnose sys session filter

List session with filters.

diagnose sys session filter

diagnose sys session filter clear

Clear session filter.

diagnose sys session filter clear

diagnose sys session filter clear dintf

Clear destination interface filter.

diagnose sys session filter clear dintf

diagnose sys session filter clear dport

Clear destination port filter.

diagnose sys session filter clear dport

diagnose sys session filter clear dst

Clear destination IP filter.

diagnose sys session filter clear dst

diagnose sys session filter clear duration

Clear duration filter.

diagnose sys session filter clear duration

diagnose sys session filter clear expire

Clear expire filter.

diagnose sys session filter clear expire

diagnose sys session filter clear nport

clear NAT'd source port filter

diagnose sys session filter clear nport

diagnose sys session filter clear nsrc

clear NAT'd source IP filter

diagnose sys session filter clear nsrc

diagnose sys session filter clear policy

Clear policy ID filter.

diagnose sys session filter clear policy

diagnose sys session filter clear proto

Clear protocol filter.

diagnose sys session filter clear proto

diagnose sys session filter clear proto-state

Clear protocol state filter.

diagnose sys session filter clear proto-state

diagnose sys session filter clear session-state1

Clear session-state1 filter.

diagnose sys session filter clear session-state1

diagnose sys session filter clear session-state2

Clear session-state2 filter.

diagnose sys session filter clear session-state2

diagnose sys session filter clear sintf

Clear source interface filter.

diagnose sys session filter clear sintf

diagnose sys session filter clear sport

Clear source port filter.

diagnose sys session filter clear sport

diagnose sys session filter clear src

Clear source IP filter.

diagnose sys session filter clear src

diagnose sys session filter clear vd

Clear virtual domain filter.

diagnose sys session filter clear vd

diagnose sys session filter dintf

Destination interface.

diagnose sys session filter dintf <xxxx>

Parameter

Description

Type

Size

<xxxx>

Interface name.

string

diagnose sys session filter dport

Destination port.

diagnose sys session filter dport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session filter dst

Destination IP address.

diagnose sys session filter dst <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP (from).

string

<xxx.xxx.xxx.xxx>

Destination IP (to).

string

diagnose sys session filter duration

duration

diagnose sys session filter duration <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Duration (from).

string

<xxx>

Duration (to).

string

diagnose sys session filter expire

expire

diagnose sys session filter expire <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Expire (from).

string

<xxx>

Expire (to).

string

diagnose sys session filter ext-dst

Add a destination address to the extended match list.

diagnose sys session filter ext-dst <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP.

string

diagnose sys session filter ext-dst-negate

Add a destination address to the negated extended match list.

diagnose sys session filter ext-dst-negate <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Destination IP.

string

diagnose sys session filter ext-src

Add a source address to the extended match list.

diagnose sys session filter ext-src <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP.

string

diagnose sys session filter ext-src-negate

Add a source address to the negated extended match list.

diagnose sys session filter ext-src-negate <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP.

string

diagnose sys session filter negate

Inverse filter.

diagnose sys session filter negate

diagnose sys session filter negate dintf

Inverse destination interface.

diagnose sys session filter negate dintf

diagnose sys session filter negate dport

Inverse destination port.

diagnose sys session filter negate dport

diagnose sys session filter negate dst

Inverse destination IP.

diagnose sys session filter negate dst

diagnose sys session filter negate duration

Inverse duration.

diagnose sys session filter negate duration

diagnose sys session filter negate expire

Inverse expire.

diagnose sys session filter negate expire

diagnose sys session filter negate nport

inverse NAT'd source port

diagnose sys session filter negate nport

diagnose sys session filter negate nsrc

inverse NAT'd source IP

diagnose sys session filter negate nsrc

diagnose sys session filter negate policy

Inverse policy ID.

diagnose sys session filter negate policy

diagnose sys session filter negate proto

Inverse protocol.

diagnose sys session filter negate proto

diagnose sys session filter negate proto-state

Inverse protocol state.

diagnose sys session filter negate proto-state

diagnose sys session filter negate session-state1

Inverse session-state1.

diagnose sys session filter negate session-state1

diagnose sys session filter negate session-state2

Inverse session-state2.

diagnose sys session filter negate session-state2

diagnose sys session filter negate sintf

Inverse source interface.

diagnose sys session filter negate sintf

diagnose sys session filter negate sport

Inverse source port.

diagnose sys session filter negate sport

diagnose sys session filter negate src

Inverse source IP.

diagnose sys session filter negate src

diagnose sys session filter negate vd

Inverse virtual domain.

diagnose sys session filter negate vd

diagnose sys session filter nport

NAT'd source port

diagnose sys session filter nport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session filter nsrc

NAT'd source ip address

diagnose sys session filter nsrc <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

NAT'd source ip (from)

string

<xxx.xxx.xxx.xxx>

NAT'd source ip (to)

string

diagnose sys session filter policy

Policy ID.

diagnose sys session filter policy <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Policy ID (from).

string

<xxx>

Policy ID (to).

string

diagnose sys session filter proto

Protocol number.

diagnose sys session filter proto <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys session filter proto-state

Protocol state.

diagnose sys session filter proto-state <x> <x>

Parameter

Description

Type

Size

<x>

<0-9> (from). 0: ANY 1: TCP_S_ESTABLISHED, SCTP_S_ESTABLISHED 2: TCP_S_SYN_SENT, SCTP_S_CLOSED 3: TCP_S_SYN_RECV, SCTP_S_COOKIE_WAIT 4: TCP_S_FIN_WAIT, SCTP_S_COOKIE_ECHOED 5: TCP_S_TIME_WAIT, SCTP_S_SHUTDOWN_SENT 6: TCP_S_CLOSE, SCTP_S_SHUTDOWN_RECD 7: TCP_S_CLOSE_WAIT, SCTP_S_SHUTDOWN_ACK_SENT 8: TCP_S_LAST_ACK 9: TCP_S_LISTEN

string

<x>

<0-9> (to). 0: ANY 1: TCP_S_ESTABLISHED, SCTP_S_ESTABLISHED 2: TCP_S_SYN_SENT, SCTP_S_CLOSED 3: TCP_S_SYN_RECV, SCTP_S_COOKIE_WAIT 4: TCP_S_FIN_WAIT, SCTP_S_COOKIE_ECHOED 5: TCP_S_TIME_WAIT, SCTP_S_SHUTDOWN_SENT 6: TCP_S_CLOSE, SCTP_S_SHUTDOWN_RECD 7: TCP_S_CLOSE_WAIT, SCTP_S_SHUTDOWN_ACK_SENT 8: TCP_S_LAST_ACK 9: TCP_S_LISTEN

string

diagnose sys session filter session-state1

Session state1.

diagnose sys session filter session-state1 <x> <x>

Parameter

Description

Type

Size

<x>

<0-FFFFFFFF>, state bits.

string

<x>

<0-FFFFFFFF>, state bit mask.

string

diagnose sys session filter session-state2

Session state2.

diagnose sys session filter session-state2 <x> <x>

Parameter

Description

Type

Size

<x>

<0-FFFFFFFF>, state bits.

string

<x>

<0-FFFFFFFF>, state bit mask.

string

diagnose sys session filter sintf

Source interface.

diagnose sys session filter sintf <xxxx>

Parameter

Description

Type

Size

<xxxx>

Interface name.

string

diagnose sys session filter sport

Source port.

diagnose sys session filter sport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session filter src

Source IP address.

diagnose sys session filter src <xxx.xxx.xxx.xxx> <xxx.xxx.xxx.xxx>

Parameter

Description

Type

Size

<xxx.xxx.xxx.xxx>

Source IP (from).

string

<xxx.xxx.xxx.xxx>

Source IP (to).

string

diagnose sys session filter vd

Index of virtual domain. -1 matches all.

diagnose sys session filter vd <xxx>

Parameter

Description

Type

Size

<xxx>

Index of virtual domain. -1 matches all.

string

diagnose sys session filter vd-name

Name of virtual domain. -1 or "any" matches all.

diagnose sys session filter vd-name <...>

Parameter

Description

Type

Size

<...>

Name of virtual domain. -1 or "any" matches all.

string

diagnose sys session full-stat

Fully stat session.

diagnose sys session full-stat

diagnose sys session help

Session help.

diagnose sys session help

diagnose sys session help add

Add session help.

diagnose sys session help add <name> <protocol> <port>

Parameter

Description

Type

Size

<name>

Help name.

string

<protocol>

Protocol number.

string

<port>

Help port.

string

diagnose sys session help delete

Delete session help.

diagnose sys session help delete <protocol> <port>

Parameter

Description

Type

Size

<protocol>

Protocol number.

string

<port>

Help port.

string

diagnose sys session help list

List session help.

diagnose sys session help list

diagnose sys session list

List session.

diagnose sys session list

diagnose sys session list expectation

List expectation session.

diagnose sys session list expectation

diagnose sys session stat

Stat session.

diagnose sys session stat

diagnose sys session sync

List session sync.

diagnose sys session sync

diagnose sys session sync reset

Reset session sync.

diagnose sys session sync reset

diagnose sys session ttl

TTL session.

diagnose sys session ttl

diagnose sys session6

IPv6 session.

diagnose sys session6

diagnose sys session6 clear

Clear IPv6 sessions defined by filter.

diagnose sys session6 clear

diagnose sys session6 exp-stat

Expectation session statistics.

diagnose sys session6 exp-stat

diagnose sys session6 filter

List IPv6 session with filters.

diagnose sys session6 filter

diagnose sys session6 filter clear

Clear IPv6 session filter.

diagnose sys session6 filter clear

diagnose sys session6 filter clear dintf

Clear destination interface filter.

diagnose sys session6 filter clear dintf

diagnose sys session6 filter clear dport

Clear destination port filter.

diagnose sys session6 filter clear dport

diagnose sys session6 filter clear dst

Clear destination IP filter.

diagnose sys session6 filter clear dst

diagnose sys session6 filter clear duration

Clear duration filter.

diagnose sys session6 filter clear duration

diagnose sys session6 filter clear expire

Clear expire filter.

diagnose sys session6 filter clear expire

diagnose sys session6 filter clear nport

Clear NAT'd source port filter.

diagnose sys session6 filter clear nport

diagnose sys session6 filter clear nsrc

Clear NAT'd source IP filter.

diagnose sys session6 filter clear nsrc

diagnose sys session6 filter clear policy

Clear policy ID filter.

diagnose sys session6 filter clear policy

diagnose sys session6 filter clear proto

Clear protocol filter.

diagnose sys session6 filter clear proto

diagnose sys session6 filter clear proto-state

Clear protocol state filter.

diagnose sys session6 filter clear proto-state

diagnose sys session6 filter clear session-state1

Clear session-state1 filter.

diagnose sys session6 filter clear session-state1

diagnose sys session6 filter clear session-state2

Clear session-state2 filter.

diagnose sys session6 filter clear session-state2

diagnose sys session6 filter clear sintf

Clear source interface filter.

diagnose sys session6 filter clear sintf

diagnose sys session6 filter clear sport

Clear source port filter.

diagnose sys session6 filter clear sport

diagnose sys session6 filter clear src

Clear source IP filter.

diagnose sys session6 filter clear src

diagnose sys session6 filter clear vd

Clear virtual domain filter.

diagnose sys session6 filter clear vd

diagnose sys session6 filter dintf

Destination interface.

diagnose sys session6 filter dintf <xxxxx>

Parameter

Description

Type

Size

<xxxxx>

Interface name.

string

diagnose sys session6 filter dport

Destination port.

diagnose sys session6 filter dport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session6 filter dst

Destination IP address.

diagnose sys session6 filter dst <xxx:xxx::xxx:xxx> <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Destination IP (from).

string

<xxx:xxx::xxx:xxx>

Destination IP (to).

string

diagnose sys session6 filter duration

duration

diagnose sys session6 filter duration <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Duration (from).

string

<xxx>

Duration (to).

string

diagnose sys session6 filter expire

expire

diagnose sys session6 filter expire <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Expire (from).

string

<xxx>

Expire (to).

string

diagnose sys session6 filter ext-dst

Add a destination address to the extended match list.

diagnose sys session6 filter ext-dst <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Destination IP.

string

diagnose sys session6 filter ext-dst-negate

Add a destination address to the negated extended match list.

diagnose sys session6 filter ext-dst-negate <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Destination IP.

string

diagnose sys session6 filter ext-src

Add a source address to the extended match list.

diagnose sys session6 filter ext-src <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Source IP.

string

diagnose sys session6 filter ext-src-negate

Add a source address to the negated extended match list.

diagnose sys session6 filter ext-src-negate <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Source IP.

string

diagnose sys session6 filter negate

Inverse filter.

diagnose sys session6 filter negate

diagnose sys session6 filter negate dintf

Inverse destination interface.

diagnose sys session6 filter negate dintf

diagnose sys session6 filter negate dport

Inverse destination port.

diagnose sys session6 filter negate dport

diagnose sys session6 filter negate dst

Inverse destination IP.

diagnose sys session6 filter negate dst

diagnose sys session6 filter negate duration

Inverse duration.

diagnose sys session6 filter negate duration

diagnose sys session6 filter negate expire

Inverse expire.

diagnose sys session6 filter negate expire

diagnose sys session6 filter negate nport

Inverse NAT'd source port.

diagnose sys session6 filter negate nport

diagnose sys session6 filter negate nsrc

Inverse NAT'd source IP.

diagnose sys session6 filter negate nsrc

diagnose sys session6 filter negate policy

Inverse policy ID.

diagnose sys session6 filter negate policy

diagnose sys session6 filter negate proto

Inverse protocol.

diagnose sys session6 filter negate proto

diagnose sys session6 filter negate proto-state

Inverse protocol state.

diagnose sys session6 filter negate proto-state

diagnose sys session6 filter negate session-state1

Inverse session-state1.

diagnose sys session6 filter negate session-state1

diagnose sys session6 filter negate session-state2

Inverse session-state2.

diagnose sys session6 filter negate session-state2

diagnose sys session6 filter negate sintf

Inverse source interface.

diagnose sys session6 filter negate sintf

diagnose sys session6 filter negate sport

Inverse source port.

diagnose sys session6 filter negate sport

diagnose sys session6 filter negate src

Inverse source IP.

diagnose sys session6 filter negate src

diagnose sys session6 filter negate vd

Inverse virtual domain.

diagnose sys session6 filter negate vd

diagnose sys session6 filter nport

NAT'd source port.

diagnose sys session6 filter nport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session6 filter nsrc

NAT'd source IP address.

diagnose sys session6 filter nsrc <xxx:xxx::xxx:xxx> <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

NAT'd source IP (from).

string

<xxx:xxx::xxx:xxx>

NAT'd Source IP (to).

string

diagnose sys session6 filter policy

Policy ID.

diagnose sys session6 filter policy <xxx> <xxx>

Parameter

Description

Type

Size

<xxx>

Policy ID (from).

string

<xxx>

Policy ID (to).

string

diagnose sys session6 filter proto

Protocol number.

diagnose sys session6 filter proto <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys session6 filter proto-state

Protocol state.

diagnose sys session6 filter proto-state <xx> <xx>

Parameter

Description

Type

Size

<xx>

<0-255> (from).

string

<xx>

<0-255> (to).

string

diagnose sys session6 filter session-state1

Session state1.

diagnose sys session6 filter session-state1 <x> <x>

Parameter

Description

Type

Size

<x>

<0-FFFFFFFF>, state bits.

string

<x>

<0-FFFFFFFF>, state bit mask.

string

diagnose sys session6 filter session-state2

Session state2.

diagnose sys session6 filter session-state2 <x> <x>

Parameter

Description

Type

Size

<x>

<0-FFFFFFFF>, state bits.

string

<x>

<0-FFFFFFFF>, state bit mask.

string

diagnose sys session6 filter sintf

Source interface.

diagnose sys session6 filter sintf <xxxxx>

Parameter

Description

Type

Size

<xxxxx>

Interface name.

string

diagnose sys session6 filter sport

Source port.

diagnose sys session6 filter sport <xxxx> <xxxx>

Parameter

Description

Type

Size

<xxxx>

<0-65535> (from).

string

<xxxx>

<0-65535> (to).

string

diagnose sys session6 filter src

Source IP address.

diagnose sys session6 filter src <xxx:xxx::xxx:xxx> <xxx:xxx::xxx:xxx>

Parameter

Description

Type

Size

<xxx:xxx::xxx:xxx>

Source IP (from).

string

<xxx:xxx::xxx:xxx>

Source IP (to).

string

diagnose sys session6 filter vd

Index of virtual domain. -1 matches all.

diagnose sys session6 filter vd <xxx>

Parameter

Description

Type

Size

<xxx>

Index of virtual domain. -1 matches all.

string

diagnose sys session6 filter vd-name

name of virtual domain. -1 or "any" matches all.

diagnose sys session6 filter vd-name <...>

Parameter

Description

Type

Size

<...>

Name of virtual domain. -1 or "any" matches all.

string

diagnose sys session6 full-stat

Fully stat session.

diagnose sys session6 full-stat

diagnose sys session6 help

IPv6 session help.

diagnose sys session6 help

diagnose sys session6 help add

Add session help.

diagnose sys session6 help add <name> <protocol> <port>

Parameter

Description

Type

Size

<name>

Help name.

string

<protocol>

Protocol number.

string

<port>

Help port.

string

diagnose sys session6 help delete

Delete session help.

diagnose sys session6 help delete <protocol> <port>

Parameter

Description

Type

Size

<protocol>

Protocol number.

string

<port>

Help port.

string

diagnose sys session6 help list

List IPv6 session help.

diagnose sys session6 help list

diagnose sys session6 list

List IPv6 session.

diagnose sys session6 list

diagnose sys session6 list expectation

List IPv6 expectation session.

diagnose sys session6 list expectation

diagnose sys session6 stat

Stat session.

diagnose sys session6 stat

diagnose sys session6 sync

List session6 sync.

diagnose sys session6 sync

diagnose sys session6 sync reset

Reset session6 sync.

diagnose sys session6 sync reset

diagnose sys shmfile

shmfile related information.

diagnose sys shmfile

diagnose sys shmfile dump

dump.

diagnose sys shmfile dump

diagnose sys shmfile dump oid-app

oid-app information.

diagnose sys shmfile dump oid-app <path.name>

Parameter

Description

Type

Size

<path.name>

object's path.name.

string

diagnose sys shmfile dump oid-slab

oid-slab information.

diagnose sys shmfile dump oid-slab <path.object>

Parameter

Description

Type

Size

<path.object>

vdom root object's information.

string

diagnose sys shmfile dump slab-file

slab file information.

diagnose sys shmfile dump slab-file [file-id]

Parameter

Description

Type

Size

[file-id]

file id.

string

diagnose sys shmfile dump table-count

table count information.

diagnose sys shmfile dump table-count

diagnose sys shmfile dump table-count total

total table count information.

diagnose sys shmfile dump table-count total <path.name>

Parameter

Description

Type

Size

<path.name>

object's path.name (e.g. system.interface).

string

diagnose sys shmfile dump table-count vdom

vdom table count information.

diagnose sys shmfile dump table-count vdom <vdom-name> <path.name>

Parameter

Description

Type

Size

<vdom-name>

vdom name.

string

<path.name>

object's path.name (e.g. system.interface).

string

diagnose sys shmfile dump vdom

vdom information.

diagnose sys shmfile dump vdom <vdom-name>

Parameter

Description

Type

Size

<vdom-name>

vdom name.

string

diagnose sys sip

SIP diagnostics.

diagnose sys sip

diagnose sys sip debug-mask

Mask for SIP kernel trace.

diagnose sys sip debug-mask <mask>

Parameter

Description

Type

Size

<mask>

For example, 0, 1, 2, 3 ...

string

diagnose sys sip dialog

SIP dialog.

diagnose sys sip dialog

diagnose sys sip dialog clear

Clear SIP dialogs.

diagnose sys sip dialog clear

diagnose sys sip dialog list

List SIP dialogs.

diagnose sys sip dialog list

diagnose sys sip mapping

SIP mapping.

diagnose sys sip mapping

diagnose sys sip mapping list

List SIP mappings.

diagnose sys sip mapping list

diagnose sys sip status

Display SIP status.

diagnose sys sip status

diagnose sys sip-proxy

SIP proxy diagnostics.

diagnose sys sip-proxy

diagnose sys sip-proxy alg

SIP to ALG passing.

diagnose sys sip-proxy alg

diagnose sys sip-proxy alg bypass

Pass SIP to ALG but pass it directly through without parsing.

diagnose sys sip-proxy alg bypass

diagnose sys sip-proxy alg parse-only

Pass SIP to ALG and parse but do not modify.

diagnose sys sip-proxy alg parse-only

diagnose sys sip-proxy calls

SIP calls.

diagnose sys sip-proxy calls

diagnose sys sip-proxy calls clear

Clear all active SIP calls.

diagnose sys sip-proxy calls clear

diagnose sys sip-proxy calls idle

List idle SIP calls.

diagnose sys sip-proxy calls idle

diagnose sys sip-proxy calls invite

List SIP invite transactions.

diagnose sys sip-proxy calls invite

diagnose sys sip-proxy calls list

List active SIP calls.

diagnose sys sip-proxy calls list

diagnose sys sip-proxy config

Configuration details.

diagnose sys sip-proxy config

diagnose sys sip-proxy config list

Display SIP per-policy configurations.

diagnose sys sip-proxy config list

diagnose sys sip-proxy config profiles

Display SIP VoIP profiles.

diagnose sys sip-proxy config profiles

diagnose sys sip-proxy debug-console

Debug consoles.

diagnose sys sip-proxy debug-console

diagnose sys sip-proxy filter

Filter for listing meters and calls.

diagnose sys sip-proxy filter

diagnose sys sip-proxy filter clear

Erase the current filter.

diagnose sys sip-proxy filter clear

diagnose sys sip-proxy filter dst-addr4

Destination address range to filter by.

diagnose sys sip-proxy filter dst-addr4 <ipv4-address> <ipv4-address>

Parameter

Description

Type

Size

<ipv4-address>

Destination IPv4 address (from).

string

<ipv4-address>

Destination IPv4 address (to).

string

diagnose sys sip-proxy filter dst-addr6

IPv6 destination address range to filter by.

diagnose sys sip-proxy filter dst-addr6 <ipv6-address> <ipv6-address>

Parameter

Description

Type

Size

<ipv6-address>

Destination IPv6 address (from).

string

<ipv6-address>

Destination IPv6 address (to).

string

diagnose sys sip-proxy filter dst-port

Destination port to filter by.

diagnose sys sip-proxy filter dst-port <port>

Parameter

Description

Type

Size

<port>

Source port.

string

diagnose sys sip-proxy filter list

Display the current filter.

diagnose sys sip-proxy filter list

diagnose sys sip-proxy filter negate

Negate the specified filter parameter.

diagnose sys sip-proxy filter negate

diagnose sys sip-proxy filter negate dst-addr4

Negate the dst-addr4 filter.

diagnose sys sip-proxy filter negate dst-addr4

diagnose sys sip-proxy filter negate dst-addr6

Negate the dst-addr6 filter.

diagnose sys sip-proxy filter negate dst-addr6

diagnose sys sip-proxy filter negate dst-port

Negate the dst-port filter.

diagnose sys sip-proxy filter negate dst-port

diagnose sys sip-proxy filter negate policy

Negate the policy filter.

diagnose sys sip-proxy filter negate policy

diagnose sys sip-proxy filter negate policy-type

Negate the policy-type filter.

diagnose sys sip-proxy filter negate policy-type

diagnose sys sip-proxy filter negate src-addr4

Negate the src-addr4 filter.

diagnose sys sip-proxy filter negate src-addr4

diagnose sys sip-proxy filter negate src-addr6

Negate the src-addr6 filter.

diagnose sys sip-proxy filter negate src-addr6

diagnose sys sip-proxy filter negate src-port

Negate the src-port filter.

diagnose sys sip-proxy filter negate src-port

diagnose sys sip-proxy filter negate vd

Negate the virtual domain filter.

diagnose sys sip-proxy filter negate vd

diagnose sys sip-proxy filter negate voip-profile

Negate the VoIP-profile filter.

diagnose sys sip-proxy filter negate voip-profile

diagnose sys sip-proxy filter policy

Policy to filter by.

diagnose sys sip-proxy filter policy <policy>

Parameter

Description

Type

Size

<policy>

policy

string

diagnose sys sip-proxy filter policy-type

Policy-type to filter by.

diagnose sys sip-proxy filter policy-type

diagnose sys sip-proxy filter policy-type ipv4

Filter IPv4 policies.

diagnose sys sip-proxy filter policy-type ipv4

diagnose sys sip-proxy filter policy-type ipv6

Filter IPv6 policies.

diagnose sys sip-proxy filter policy-type ipv6

diagnose sys sip-proxy filter src-addr4

Source address range to filter by.

diagnose sys sip-proxy filter src-addr4 <ipv4-address> <ipv4-address>

Parameter

Description

Type

Size

<ipv4-address>

Source IPv4 address (from).

string

<ipv4-address>

Source IPv4 address (to).

string

diagnose sys sip-proxy filter src-addr6

IPv6 source address range to filter by.

diagnose sys sip-proxy filter src-addr6 <ipv6-address> <ipv6-address>

Parameter

Description

Type

Size

<ipv6-address>

Source IPv6 address (from).

string

<ipv6-address>

Source IPv6 address (to).

string

diagnose sys sip-proxy filter src-port

Source port to filter by.

diagnose sys sip-proxy filter src-port <port>

Parameter

Description

Type

Size

<port>

Source port.

string

diagnose sys sip-proxy filter vd

Index of virtual domain. -1 matches all.

diagnose sys sip-proxy filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys sip-proxy filter voip-profile

VoIP profile to filter by.

diagnose sys sip-proxy filter voip-profile <voip-profile>

Parameter

Description

Type

Size

<voip-profile>

voip-profile

string

diagnose sys sip-proxy log-filter

SIP ALG debug log filter.

diagnose sys sip-proxy log-filter

diagnose sys sip-proxy log-filter clear

Clear the current filter.

diagnose sys sip-proxy log-filter clear

diagnose sys sip-proxy log-filter dst-addr4

IPv4 destination address range to filter by.

diagnose sys sip-proxy log-filter dst-addr4 <ip-address> <ip-address>

Parameter

Description

Type

Size

<ip-address>

Destination IPv4 address (from).

string

<ip-address>

Destination IPv4 address (to).

string

diagnose sys sip-proxy log-filter dst-addr6

IPv6 destination address range to filter by.

diagnose sys sip-proxy log-filter dst-addr6 <ipv6-address> <ipv6-address>

Parameter

Description

Type

Size

<ipv6-address>

Destination IPv6 address (from).

string

<ipv6-address>

Destination IPv6 address (to).

string

diagnose sys sip-proxy log-filter dst-port

Destination port to filter by.

diagnose sys sip-proxy log-filter dst-port <port>

Parameter

Description

Type

Size

<port>

Source port.

string

diagnose sys sip-proxy log-filter list

Display the current filter.

diagnose sys sip-proxy log-filter list

diagnose sys sip-proxy log-filter negate

Negate the specified filter parameter.

diagnose sys sip-proxy log-filter negate

diagnose sys sip-proxy log-filter negate dst-addr4

Negate the dst-addr4 filter.

diagnose sys sip-proxy log-filter negate dst-addr4

diagnose sys sip-proxy log-filter negate dst-addr6

Negate the dst-addr6 filter.

diagnose sys sip-proxy log-filter negate dst-addr6

diagnose sys sip-proxy log-filter negate dst-port

Negate the dst-port filter.

diagnose sys sip-proxy log-filter negate dst-port

diagnose sys sip-proxy log-filter negate policy

Negate the policy filter.

diagnose sys sip-proxy log-filter negate policy

diagnose sys sip-proxy log-filter negate policy-type

Negate the policy-type filter.

diagnose sys sip-proxy log-filter negate policy-type

diagnose sys sip-proxy log-filter negate src-addr4

Negate the src-addr4 filter.

diagnose sys sip-proxy log-filter negate src-addr4

diagnose sys sip-proxy log-filter negate src-addr6

Negate the src-addr6 filter.

diagnose sys sip-proxy log-filter negate src-addr6

diagnose sys sip-proxy log-filter negate src-port

Negate the src-port filter.

diagnose sys sip-proxy log-filter negate src-port

diagnose sys sip-proxy log-filter negate vd

Negate the virtual domain filter.

diagnose sys sip-proxy log-filter negate vd

diagnose sys sip-proxy log-filter negate voip-profile

Negate the VoIP-profile filter.

diagnose sys sip-proxy log-filter negate voip-profile

diagnose sys sip-proxy log-filter policy

Policy to filter by.

diagnose sys sip-proxy log-filter policy <policy>

Parameter

Description

Type

Size

<policy>

policy

string

diagnose sys sip-proxy log-filter policy-type

Policy-type to filter by.

diagnose sys sip-proxy log-filter policy-type

diagnose sys sip-proxy log-filter policy-type ipv4

Filter IPv4 policies.

diagnose sys sip-proxy log-filter policy-type ipv4

diagnose sys sip-proxy log-filter policy-type ipv6

Filter IPv6 policies.

diagnose sys sip-proxy log-filter policy-type ipv6

diagnose sys sip-proxy log-filter src-addr4

IPv4 source address range to filter by.

diagnose sys sip-proxy log-filter src-addr4 <ipv4-address> <ipv4-address>

Parameter

Description

Type

Size

<ipv4-address>

Source IPv4 address (from).

string

<ipv4-address>

Source IPv4 address (to).

string

diagnose sys sip-proxy log-filter src-addr6

IPv6 source address range to filter by.

diagnose sys sip-proxy log-filter src-addr6 <ipv6-address> <ipv6-address>

Parameter

Description

Type

Size

<ipv6-address>

Source IPv6 address (from).

string

<ipv6-address>

Source IPv6 address (to).

string

diagnose sys sip-proxy log-filter src-port

Source port to filter by.

diagnose sys sip-proxy log-filter src-port <port>

Parameter

Description

Type

Size

<port>

Source port.

string

diagnose sys sip-proxy log-filter vd

Index of virtual domain. -1 matches all.

diagnose sys sip-proxy log-filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain. -1 matches all.

string

diagnose sys sip-proxy log-filter voip-profile

VoIP profile to filter by.

diagnose sys sip-proxy log-filter voip-profile <voip-profile>

Parameter

Description

Type

Size

<voip-profile>

voip-profile

string

diagnose sys sip-proxy meters

Diagnostics for SIP rate limiting meters.

diagnose sys sip-proxy meters

diagnose sys sip-proxy meters list

List active SIP rate limiting meters.

diagnose sys sip-proxy meters list

diagnose sys sip-proxy redirect

Redirects

diagnose sys sip-proxy redirect

diagnose sys sip-proxy redirect list

List SIP redirects.

diagnose sys sip-proxy redirect list

diagnose sys sip-proxy restart

Restart SIP and SCCP.

diagnose sys sip-proxy restart

diagnose sys sip-proxy scheduler-times

Scheduler times.

diagnose sys sip-proxy scheduler-times

diagnose sys sip-proxy scheduler-times display

Display scheduler times.

diagnose sys sip-proxy scheduler-times display

diagnose sys sip-proxy scheduler-times start

Start measuring scheduler times.

diagnose sys sip-proxy scheduler-times start

diagnose sys sip-proxy scheduler-times stop

Stop measuring scheduler times.

diagnose sys sip-proxy scheduler-times stop

diagnose sys sip-proxy session

SIP sessions.

diagnose sys sip-proxy session

diagnose sys sip-proxy session list

List SIP sessions.

diagnose sys sip-proxy session list

diagnose sys sip-proxy ssl

SSL hardware support.

diagnose sys sip-proxy ssl

diagnose sys sip-proxy ssl hardware

Enable SSL hardware support (default) (will restart voip).

diagnose sys sip-proxy ssl hardware

diagnose sys sip-proxy ssl software

Disable SSL hardware support (will restart voip).

diagnose sys sip-proxy ssl software

diagnose sys sip-proxy stats

SIP proxy statistics.

diagnose sys sip-proxy stats

diagnose sys sip-proxy stats call

SIP proxy call statistics summary.

diagnose sys sip-proxy stats call

diagnose sys sip-proxy stats clear

Clear SIP proxy activity statistics.

diagnose sys sip-proxy stats clear

diagnose sys sip-proxy stats ha

SIP proxy HA statistics summary.

diagnose sys sip-proxy stats ha

diagnose sys sip-proxy stats list

SIP proxy activity statistics.

diagnose sys sip-proxy stats list

diagnose sys sip-proxy stats mem

Memory usage.

diagnose sys sip-proxy stats mem

diagnose sys sip-proxy stats mem full

Memory usage details.

diagnose sys sip-proxy stats mem full

diagnose sys sip-proxy stats mem summary

Memory usage summary.

diagnose sys sip-proxy stats mem summary

diagnose sys sip-proxy stats proto

SIP proxy general protocol statistics summary.

diagnose sys sip-proxy stats proto

diagnose sys sip-proxy stats ssl-auth

SIP proxy SSL authentication statistics.

diagnose sys sip-proxy stats ssl-auth

diagnose sys sip-proxy stats udp

SIP proxy UDP statistics summary.

diagnose sys sip-proxy stats udp

diagnose sys sip-proxy valgrind

Valgrind analysis.

diagnose sys sip-proxy valgrind

diagnose sys sip-proxy valgrind disable

Force daemon to restart.

diagnose sys sip-proxy valgrind disable

diagnose sys sip-proxy valgrind enable

Force daemon to restart.

diagnose sys sip-proxy valgrind enable

diagnose sys sip-proxy valgrind log

Valgrind logs.

diagnose sys sip-proxy valgrind log

diagnose sys sip-proxy valgrind log clear

Clear logs.

diagnose sys sip-proxy valgrind log clear

diagnose sys sip-proxy valgrind log show

Show logs.

diagnose sys sip-proxy valgrind log show

diagnose sys sip-proxy valgrind memcheck

Force daemon to restart.

diagnose sys sip-proxy valgrind memcheck

diagnose sys sip-proxy valgrind memcheck_less

Force daemon to restart.

diagnose sys sip-proxy valgrind memcheck_less

diagnose sys sip-proxy valgrind status

Show valgrind status.

diagnose sys sip-proxy valgrind status

diagnose sys sip-proxy vdom

Diagnostics for VDOM in VoIP Daemon.

diagnose sys sip-proxy vdom

diagnose sys sip-proxy vdom list

List active VDOMs in VoIP daemon.

diagnose sys sip-proxy vdom list

diagnose sys sip-proxy vip

VIPs

diagnose sys sip-proxy vip

diagnose sys sip-proxy vip real-server

Real server VIP list.

diagnose sys sip-proxy vip real-server

diagnose sys smc-ntp

SMC NTP daemon command.

diagnose sys smc-ntp

diagnose sys smc-ntp status

List SMC NTP setting.

diagnose sys smc-ntp status

diagnose sys speedtest-server

speed test server.

diagnose sys speedtest-server

diagnose sys speedtest-server clients

Speed test clients.

diagnose sys speedtest-server clients

diagnose sys speedtest-server clients flush

Flush pending speed test clients.

diagnose sys speedtest-server clients flush

diagnose sys speedtest-server clients list

List pending speed test clients.

diagnose sys speedtest-server clients list

diagnose sys speedtest-server controller

Speed test controller

diagnose sys speedtest-server controller

diagnose sys speedtest-server controller add

Add a controller

diagnose sys speedtest-server controller add <interface>

Parameter

Description

Type

Size

<interface>

Name of the interface.

string

diagnose sys speedtest-server controller del

Delete a controller

diagnose sys speedtest-server controller del <interface>

Parameter

Description

Type

Size

<interface>

Name of the interface.

string

diagnose sys speedtest-server controller list

List controllers.

diagnose sys speedtest-server controller list <name>

Parameter

Description

Type

Size

<name>

Name of the controller.

string

diagnose sys speedtest-server log

Speed test result log.

diagnose sys speedtest-server log

diagnose sys speedtest-server log del-file

Delete log file.

diagnose sys speedtest-server log del-file

diagnose sys speedtest-server log list

List result log cache.

diagnose sys speedtest-server log list

diagnose sys speedtest-server log load-disk

Load log file to memory.

diagnose sys speedtest-server log load-disk

diagnose sys speedtest-server log save-disk

Save result logs to file.

diagnose sys speedtest-server log save-disk

diagnose sys speedtest-server speedtest-dbg

Toggle speed test debug output

diagnose sys speedtest-server speedtest-dbg

diagnose sys stp

STP diagnostics.

diagnose sys stp

diagnose sys stp bridge

Display STP details for one or more bridges.

diagnose sys stp bridge

diagnose sys stp bridge details

Display STP details for a bridge.

diagnose sys stp bridge details

diagnose sys stp bridge info

Display STP details for a bridge.

diagnose sys stp bridge info

diagnose sys stp bridge summary

Display STP summary for a bridge.

diagnose sys stp bridge summary

diagnose sys stp config

Display STP configuration.

diagnose sys stp config

diagnose sys stp debug

Debug log.

diagnose sys stp debug

diagnose sys stp debug filter

Show the filter for this console.

diagnose sys stp debug filter

diagnose sys stp debug filter bridge

Bridge name to match.

diagnose sys stp debug filter bridge

diagnose sys stp debug filter clear

Clear the filter.

diagnose sys stp debug filter clear

diagnose sys stp debug filter list

Show STP debug filter.

diagnose sys stp debug filter list

diagnose sys stp debug filter port

Port name to match.

diagnose sys stp debug filter port

diagnose sys stp debug start

Start logging STP debug on this console.

diagnose sys stp debug start

diagnose sys stp debug stop

Stop logging STP debug on this console.

diagnose sys stp debug stop

diagnose sys stp restart

Restart the STP process

diagnose sys stp restart

diagnose sys stp stats

Display statistics for all STP processes.

diagnose sys stp stats

diagnose sys stp stats config

Display statistics for the STP configuration handling process.

diagnose sys stp stats config

diagnose sys stp stats crash

Display statistics for the STP crash log generating process.

diagnose sys stp stats crash

diagnose sys stp stats debug

Display statistics for the STP debug log process.

diagnose sys stp stats debug

diagnose sys stp stats manager

Display statistics for the STP manager process.

diagnose sys stp stats manager

diagnose sys stp stats rxtx

Display statistics for the STP reception&transmission process.

diagnose sys stp stats rxtx

diagnose sys swnet

sw device

diagnose sys swnet

diagnose sys swnet list

list sw device

diagnose sys swnet list <name>

Parameter

Description

Type

Size

<name>

sw device name

string

diagnose sys tcp-auth-options

TCP auth options info.

diagnose sys tcp-auth-options

diagnose sys tcp-option

Enable/disable TCP option.

diagnose sys tcp-option

diagnose sys tcp-option disable

disable

diagnose sys tcp-option disable

diagnose sys tcp-option dump

Show TCP option status

diagnose sys tcp-option dump

diagnose sys tcp-option enable

enable

diagnose sys tcp-option enable

diagnose sys tcpsock

TCP sock info.

diagnose sys tcpsock

diagnose sys tcpsock6

TCP sock6 info.

diagnose sys tcpsock6

diagnose sys top

Show top processes information.

diagnose sys top <value> <Integer> <value>

Parameter

Description

Type

Size

<value>

Delay in seconds (default 5).

string

<Integer>

Maximum lines to display (default 20). Show all the running processes if larger than its total number.

string

<value>

Iterations to run (default unlimited).

string

diagnose sys top-all

Show top threads information.

diagnose sys top-all <value> <Integer> <value>

Parameter

Description

Type

Size

<value>

Delay in seconds (default 5).

string

<Integer>

Maximum lines to display (default 20). Show all the running threads if larger than its total number.

string

<value>

Iterations to run (default unlimited).

string

diagnose sys top-fd

Display processes with the most active file descriptors (default 5 processes).

diagnose sys top-fd [process-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

diagnose sys top-fd detail

Display per-process active fd info along with details (default 5 processes, 50 fds).

diagnose sys top-fd detail [process-count] [fd-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

[fd-count]

Number of FDs to include (per process, default 50).

string

diagnose sys top-mem

Display processes with the most used memory (default 5 processes).

diagnose sys top-mem [process-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

diagnose sys top-mem detail

Display per-process memory info along with details (default 5 processes).

diagnose sys top-mem detail [process-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

diagnose sys top-sockmem

Display processes with the most used socket memory (default 5 processes).

diagnose sys top-sockmem [process-count]

Parameter

Description

Type

Size

[process-count]

Number of processes to include info for (default 5).

string

diagnose sys traffic

Traffic information

diagnose sys traffic

diagnose sys traffic app-stats

Traffic application statistics.

diagnose sys traffic app-stats

diagnose sys traffic app-stats add

Add traffic application statistics entry.

diagnose sys traffic app-stats add <app_id>

Parameter

Description

Type

Size

<app_id>

A decimal number.

string

diagnose sys traffic app-stats del

Delete traffic application statistics entry.

diagnose sys traffic app-stats del <app_id>

Parameter

Description

Type

Size

<app_id>

A decimal number.

string

diagnose sys traffic app-stats hash-stats

Traffic application hash statistics.

diagnose sys traffic app-stats hash-stats

diagnose sys traffic app-stats list

List traffic application statistics entry.

diagnose sys traffic app-stats list <app_id>

Parameter

Description

Type

Size

<app_id>

A decimal number.

string

diagnose sys traffic statistics

Traffic statistics

diagnose sys traffic statistics

diagnose sys traffic statistics clear

Clear traffic stats.

diagnose sys traffic statistics clear

diagnose sys traffic statistics show

Show traffic stats.

diagnose sys traffic statistics show

diagnose sys traffic-priority

Traffic Priority (DSCP/TOS).

diagnose sys traffic-priority

diagnose sys traffic-priority list

List traffic priority settings.

diagnose sys traffic-priority list

diagnose sys udp-reserved-port

Reserved UDP ports.

diagnose sys udp-reserved-port

diagnose sys udp-reserved-port test

Test if port has been reserved.

diagnose sys udp-reserved-port test <port> [vdom]

Parameter

Description

Type

Size

<port>

UDP port that will be tested

string

[vdom]

VDOM name. If not specified, global reserved UDP ports will be used to test

string

diagnose sys udpsock

UDP sock info.

diagnose sys udpsock

diagnose sys udpsock6

UDP sock6 info.

diagnose sys udpsock6

diagnose sys uuid

UUID debug.

diagnose sys uuid

diagnose sys uuid allow-manual-set

Allow to set UUID manually.

diagnose sys uuid allow-manual-set

diagnose sys uuid allow-manual-set disable

Disable.

diagnose sys uuid allow-manual-set disable

diagnose sys uuid allow-manual-set enable

Enable.

diagnose sys uuid allow-manual-set enable

diagnose sys uuid generate

Generate a UUID.

diagnose sys uuid generate

diagnose sys var-zone

var-zone information.

diagnose sys var-zone

diagnose sys var-zone show

Show var-zone data.

diagnose sys var-zone show

diagnose sys vd

Virtual domain management.

diagnose sys vd

diagnose sys vd add

Add a Virtual System.

diagnose sys vd add <vdname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

diagnose sys vd delete

Delete a Virtual System.

diagnose sys vd delete <vdname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

diagnose sys vd list

List Virtual Domains.

diagnose sys vd list

diagnose sys vd set

Set current VDOM.

diagnose sys vd set <vdname>

Parameter

Description

Type

Size

<vdname>

Virtual Domain Name.

string

diagnose sys vd stats

Show VDOM statistics.

diagnose sys vd stats

diagnose sys vdom-property

VDOM property information.

diagnose sys vdom-property

diagnose sys vlan

vlan

diagnose sys vlan

diagnose sys vlan list

List VLAN.

diagnose sys vlan list

diagnose sys vxlan

VXLAN diagnostics.

diagnose sys vxlan

diagnose sys vxlan device

VXLAN device.

diagnose sys vxlan device

diagnose sys vxlan device list

Display VXLAN devices.

diagnose sys vxlan device list

diagnose sys vxlan fdb

VXLAN forwarding DB.

diagnose sys vxlan fdb

diagnose sys vxlan fdb list

Display VXLAN forwarding DB.

diagnose sys vxlan fdb list <string>

Parameter

Description

Type

Size

<string>

Interface name.

string

diagnose sys vxlan fdb stat

Display VXLAN forwarding DB statistics.

diagnose sys vxlan fdb stat <string>

Parameter

Description

Type

Size

<string>

Interface name.

string

diagnose sys waninfo

Get WAN Information through FortiGuard.

diagnose sys waninfo

diagnose sys waninfo ipify

Get public IP through https://api.ipify.org.

diagnose sys waninfo ipify <ddd.ddd.ddd.ddd> or <interface name> <vdom>

Parameter

Description

Type

Size

<ddd.ddd.ddd.ddd> or <interface name>

Specify the source IPv4 address or interface name.

string

<vdom>

Specify the Virtual Domain name.

string

diagnose sys wccp

wccp

diagnose sys wccp

diagnose sys wccp delete

Delete one wccp service.

diagnose sys wccp delete <xxx>

Parameter

Description

Type

Size

<xxx>

Service ID.

string

diagnose sys wccp flush

Flush wccp services.

diagnose sys wccp flush

diagnose sys wccp list

List wccp services.

diagnose sys wccp list

diagnose sys wireless

wireless

diagnose sys wireless

diagnose sys wireless apdd

ap daemon debug, such as ap scan

diagnose sys wireless apdd <-c|-h> <value1> <value2> <value3>

Parameter

Description

Type

Size

<-c|-h>

Control plane or help.

string

<value1>

Value of command.

string

<value2>

Value of command.

string

<value3>

Value of command.

string

diagnose sys wireless iwconfig

iwconfig

diagnose sys wireless iwconfig <name> <cmd> <value1> <value2> <value3>

Parameter

Description

Type

Size

<name>

Interface name of wireless.

string

<cmd>

Command for wireless.

string

<value1>

Value of command.

string

<value2>

Value of command.

string

<value3>

Value of command.

string

diagnose sys wireless iwpriv

iwpriv

diagnose sys wireless iwpriv <name> <cmd> <value1> <value2> <value3>

Parameter

Description

Type

Size

<name>

Interface name of wireless.

string

<cmd>

Command for wireless.

string

<value1>

Value of command.

string

<value2>

Value of command.

string

<value3>

Value of command.

string

diagnose sys wireless listchan

list channels

diagnose sys wireless listchan

diagnose sys wireless stats

stats

diagnose sys wireless stats <name>

Parameter

Description

Type

Size

<name>

Interface name of wireless.

string