Fortinet white logo
Fortinet white logo

CLI Reference

diagnose user

diagnose user

User

This topic includes the following commands:

diagnose user banned-ip

Banned IP addresses.

diagnose user banned-ip

diagnose user banned-ip add

Add banned IP address.

diagnose user banned-ip add

diagnose user banned-ip add src4

IPv4 source ban.

diagnose user banned-ip add src4 <src-ipv4> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip add src6

IPv6 source ban.

diagnose user banned-ip add src6 <src-ipv6> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip clear

Clear all banned IP addresses.

diagnose user banned-ip clear

diagnose user banned-ip delete

Delete banned IP address.

diagnose user banned-ip delete

diagnose user banned-ip delete src4

IPv4 source ban.

diagnose user banned-ip delete src4 <src-ipv4>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

diagnose user banned-ip delete src6

IPv6 source ban.

diagnose user banned-ip delete src6 <src-ipv6>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

diagnose user banned-ip list

List banned IPs.

diagnose user banned-ip list

diagnose user banned-ip list all

List all bans.

diagnose user banned-ip list all

diagnose user banned-ip list src4

IPv4 source ban.

diagnose user banned-ip list src4

diagnose user banned-ip list src6

IPv6 source ban.

diagnose user banned-ip list src6

diagnose user banned-ip stat

stat

diagnose user banned-ip stat

diagnose user banned-ip stress-test

IPv4 stress test for SRC bans.

diagnose user banned-ip stress-test <ipv4> <expiry> <ban-counts> <ban-source>

Parameter

Description

Type

Size

<ipv4>

Starting IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-counts>

Number of banned IP addresses.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

diagnose user device

User devices.

diagnose user device

diagnose user device clear

Clear discovered hosts.

diagnose user device clear

diagnose user device clear vd

Clear discovered hosts in a specific virtual domain.

diagnose user device clear vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device del

Remove a specific host.

diagnose user device del <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device get

List a specific host.

diagnose user device get <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device list

List known hosts.

diagnose user device list

diagnose user device list vd

List discovered hosts in a specific virtual domain.

diagnose user device list vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device stats

User device stats.

diagnose user device stats

diagnose user

diagnose user

User

This topic includes the following commands:

diagnose user banned-ip

Banned IP addresses.

diagnose user banned-ip

diagnose user banned-ip add

Add banned IP address.

diagnose user banned-ip add

diagnose user banned-ip add src4

IPv4 source ban.

diagnose user banned-ip add src4 <src-ipv4> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip add src6

IPv6 source ban.

diagnose user banned-ip add src6 <src-ipv6> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip clear

Clear all banned IP addresses.

diagnose user banned-ip clear

diagnose user banned-ip delete

Delete banned IP address.

diagnose user banned-ip delete

diagnose user banned-ip delete src4

IPv4 source ban.

diagnose user banned-ip delete src4 <src-ipv4>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

diagnose user banned-ip delete src6

IPv6 source ban.

diagnose user banned-ip delete src6 <src-ipv6>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

diagnose user banned-ip list

List banned IPs.

diagnose user banned-ip list

diagnose user banned-ip list all

List all bans.

diagnose user banned-ip list all

diagnose user banned-ip list src4

IPv4 source ban.

diagnose user banned-ip list src4

diagnose user banned-ip list src6

IPv6 source ban.

diagnose user banned-ip list src6

diagnose user banned-ip stat

stat

diagnose user banned-ip stat

diagnose user banned-ip stress-test

IPv4 stress test for SRC bans.

diagnose user banned-ip stress-test <ipv4> <expiry> <ban-counts> <ban-source>

Parameter

Description

Type

Size

<ipv4>

Starting IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-counts>

Number of banned IP addresses.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

diagnose user device

User devices.

diagnose user device

diagnose user device clear

Clear discovered hosts.

diagnose user device clear

diagnose user device clear vd

Clear discovered hosts in a specific virtual domain.

diagnose user device clear vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device del

Remove a specific host.

diagnose user device del <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device get

List a specific host.

diagnose user device get <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device list

List known hosts.

diagnose user device list

diagnose user device list vd

List discovered hosts in a specific virtual domain.

diagnose user device list vd <name>

Parameter

Description

Type

Size

<name>

Virtual domain name to filter by.

string

diagnose user device stats

User device stats.

diagnose user device stats