Fortinet white logo
Fortinet white logo

CLI Reference

config web-proxy forward-server

config web-proxy forward-server

Configure forward-server addresses.

config web-proxy forward-server
    Description: Configure forward-server addresses.
    edit <name>
        set addr-type [ip|ipv6|...]
        set comment {string}
        set fqdn {string}
        set healthcheck [disable|enable]
        set interface {string}
        set interface-select-method [sdwan|specify]
        set ip {ipv4-address-any}
        set ipv6 {ipv6-address}
        set masquerade [enable|disable]
        set monitor {string}
        set password {password}
        set port {integer}
        set server-down-option [block|pass]
        set username {string}
        set vrf-select {integer}
    next
end

config web-proxy forward-server

Parameter

Description

Type

Size

Default

addr-type

Address type of the forwarding proxy server: IP or FQDN.

option

-

ip

Option

Description

ip

Use an IPv4 address for the forwarding proxy server.

ipv6

Use an IPv6 address for the forwarding proxy server.

fqdn

Use the FQDN for the forwarding proxy server.

comment

Comment.

string

Maximum length: 63

fqdn

Forward server Fully Qualified Domain Name (FQDN).

string

Maximum length: 255

healthcheck

Enable/disable forward server health checking. Attempts to connect through the remote forwarding server to a destination to verify that the forwarding server is operating normally.

option

-

disable

Option

Description

disable

Disable health checking.

enable

Enable health checking.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

sdwan

Option

Description

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

ip

Forward proxy server IP address.

ipv4-address-any

Not Specified

0.0.0.0

ipv6

Forward proxy server IPv6 address.

ipv6-address

Not Specified

::

masquerade

Enable/disable use of the IP address of the outgoing interface as the client IP address (default = enable)

option

-

enable

Option

Description

enable

Enable use of the IP address of the outgoing interface as the client IP address.

disable

Disable use of the IP address of the outgoing interface as the client IP address.

monitor

URL for forward server health check monitoring (default = www.google.com).

string

Maximum length: 255

www.google.com

name

Server name.

string

Maximum length: 63

password

HTTP authentication password.

password

Not Specified

port

Port number that the forwarding server expects to receive HTTP sessions on (1 - 65535, default = 3128).

integer

Minimum value: 1 Maximum value: 65535

3128

server-down-option

Action to take when the forward server is found to be down: block sessions until the server is back up or pass sessions to their destination.

option

-

block

Option

Description

block

Block sessions until the server is back up.

pass

Pass sessions to their destination bypassing the forward server.

username

HTTP authentication user name.

string

Maximum length: 64

vrf-select

VRF ID used for connection to server.

integer

Minimum value: 0 Maximum value: 511

-1

config web-proxy forward-server

config web-proxy forward-server

Configure forward-server addresses.

config web-proxy forward-server
    Description: Configure forward-server addresses.
    edit <name>
        set addr-type [ip|ipv6|...]
        set comment {string}
        set fqdn {string}
        set healthcheck [disable|enable]
        set interface {string}
        set interface-select-method [sdwan|specify]
        set ip {ipv4-address-any}
        set ipv6 {ipv6-address}
        set masquerade [enable|disable]
        set monitor {string}
        set password {password}
        set port {integer}
        set server-down-option [block|pass]
        set username {string}
        set vrf-select {integer}
    next
end

config web-proxy forward-server

Parameter

Description

Type

Size

Default

addr-type

Address type of the forwarding proxy server: IP or FQDN.

option

-

ip

Option

Description

ip

Use an IPv4 address for the forwarding proxy server.

ipv6

Use an IPv6 address for the forwarding proxy server.

fqdn

Use the FQDN for the forwarding proxy server.

comment

Comment.

string

Maximum length: 63

fqdn

Forward server Fully Qualified Domain Name (FQDN).

string

Maximum length: 255

healthcheck

Enable/disable forward server health checking. Attempts to connect through the remote forwarding server to a destination to verify that the forwarding server is operating normally.

option

-

disable

Option

Description

disable

Disable health checking.

enable

Enable health checking.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

sdwan

Option

Description

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

ip

Forward proxy server IP address.

ipv4-address-any

Not Specified

0.0.0.0

ipv6

Forward proxy server IPv6 address.

ipv6-address

Not Specified

::

masquerade

Enable/disable use of the IP address of the outgoing interface as the client IP address (default = enable)

option

-

enable

Option

Description

enable

Enable use of the IP address of the outgoing interface as the client IP address.

disable

Disable use of the IP address of the outgoing interface as the client IP address.

monitor

URL for forward server health check monitoring (default = www.google.com).

string

Maximum length: 255

www.google.com

name

Server name.

string

Maximum length: 63

password

HTTP authentication password.

password

Not Specified

port

Port number that the forwarding server expects to receive HTTP sessions on (1 - 65535, default = 3128).

integer

Minimum value: 1 Maximum value: 65535

3128

server-down-option

Action to take when the forward server is found to be down: block sessions until the server is back up or pass sessions to their destination.

option

-

block

Option

Description

block

Block sessions until the server is back up.

pass

Pass sessions to their destination bypassing the forward server.

username

HTTP authentication user name.

string

Maximum length: 64

vrf-select

VRF ID used for connection to server.

integer

Minimum value: 0 Maximum value: 511

-1