Fortinet white logo
Fortinet white logo

CLI Reference

diagnose user

diagnose user

User

This topic includes the following commands:

diagnose user banned-ip

Banned IP addresses.

diagnose user banned-ip

diagnose user banned-ip add

Add banned IP address.

diagnose user banned-ip add

diagnose user banned-ip add src4

IPv4 source ban.

diagnose user banned-ip add src4 <src-ipv4> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip add src6

IPv6 source ban.

diagnose user banned-ip add src6 <src-ipv6> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip clear

Clear all banned IP addresses.

diagnose user banned-ip clear

diagnose user banned-ip delete

Delete banned IP address.

diagnose user banned-ip delete

diagnose user banned-ip delete src4

IPv4 source ban.

diagnose user banned-ip delete src4 <src-ipv4>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

diagnose user banned-ip delete src6

IPv6 source ban.

diagnose user banned-ip delete src6 <src-ipv6>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

diagnose user banned-ip list

List banned IPs.

diagnose user banned-ip list

diagnose user banned-ip list all

List all bans.

diagnose user banned-ip list all

diagnose user banned-ip list src4

IPv4 source ban.

diagnose user banned-ip list src4

diagnose user banned-ip list src6

IPv6 source ban.

diagnose user banned-ip list src6

diagnose user banned-ip stat

stat

diagnose user banned-ip stat

diagnose user banned-ip stress-test

IPv4 stress test for SRC bans.

diagnose user banned-ip stress-test <ipv4> <expiry> <ban-counts> <ban-source>

Parameter

Description

Type

Size

<ipv4>

Starting IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-counts>

Number of banned IP addresses.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

diagnose user device

User devices.

diagnose user device

diagnose user device clear

Clear discovered hosts.

diagnose user device clear

diagnose user device clear vd

Clear discovered hosts in a specific virtual domain.

diagnose user device clear vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device del

Remove a specific host.

diagnose user device del <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device get

Display a specific host.

diagnose user device get <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device list

Display discovered devices.

diagnose user device list <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device list details

Display details of the discovered devices.

diagnose user device list details

diagnose user device list details vd

Display the details of the discovered devices in a specific virtual domain.

diagnose user device list details vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device list summary

Display a summary of the discovered devices.

diagnose user device list summary

diagnose user device list summary vd

Display a summary of the discovered devices in a specific virtual domain.

diagnose user device list summary vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device list vd

Display discovered devices in a specific virtual domain.

diagnose user device list vd

diagnose user device stats

User device stats.

diagnose user device stats

diagnose user

diagnose user

User

This topic includes the following commands:

diagnose user banned-ip

Banned IP addresses.

diagnose user banned-ip

diagnose user banned-ip add

Add banned IP address.

diagnose user banned-ip add

diagnose user banned-ip add src4

IPv4 source ban.

diagnose user banned-ip add src4 <src-ipv4> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip add src6

IPv6 source ban.

diagnose user banned-ip add src6 <src-ipv6> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip clear

Clear all banned IP addresses.

diagnose user banned-ip clear

diagnose user banned-ip delete

Delete banned IP address.

diagnose user banned-ip delete

diagnose user banned-ip delete src4

IPv4 source ban.

diagnose user banned-ip delete src4 <src-ipv4>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

diagnose user banned-ip delete src6

IPv6 source ban.

diagnose user banned-ip delete src6 <src-ipv6>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

diagnose user banned-ip list

List banned IPs.

diagnose user banned-ip list

diagnose user banned-ip list all

List all bans.

diagnose user banned-ip list all

diagnose user banned-ip list src4

IPv4 source ban.

diagnose user banned-ip list src4

diagnose user banned-ip list src6

IPv6 source ban.

diagnose user banned-ip list src6

diagnose user banned-ip stat

stat

diagnose user banned-ip stat

diagnose user banned-ip stress-test

IPv4 stress test for SRC bans.

diagnose user banned-ip stress-test <ipv4> <expiry> <ban-counts> <ban-source>

Parameter

Description

Type

Size

<ipv4>

Starting IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-counts>

Number of banned IP addresses.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

diagnose user device

User devices.

diagnose user device

diagnose user device clear

Clear discovered hosts.

diagnose user device clear

diagnose user device clear vd

Clear discovered hosts in a specific virtual domain.

diagnose user device clear vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device del

Remove a specific host.

diagnose user device del <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device get

Display a specific host.

diagnose user device get <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device list

Display discovered devices.

diagnose user device list <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device list details

Display details of the discovered devices.

diagnose user device list details

diagnose user device list details vd

Display the details of the discovered devices in a specific virtual domain.

diagnose user device list details vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device list summary

Display a summary of the discovered devices.

diagnose user device list summary

diagnose user device list summary vd

Display a summary of the discovered devices in a specific virtual domain.

diagnose user device list summary vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device list vd

Display discovered devices in a specific virtual domain.

diagnose user device list vd

diagnose user device stats

User device stats.

diagnose user device stats