Fortinet white logo
Fortinet white logo

CLI Reference

config firewall decrypted-traffic-mirror

config firewall decrypted-traffic-mirror

Configure decrypted traffic mirror.

config firewall decrypted-traffic-mirror
    Description: Configure decrypted traffic mirror.
    edit <name>
        set dstmac {mac-address}
        set traffic-type [ssl|ssh]
        set traffic-source [client|server|...]
        config interface
            Description: Decrypted traffic mirror interface
            edit <name>
            next
        end
    next
end

config firewall decrypted-traffic-mirror

Parameter

Description

Type

Size

name

Name.

string

Maximum length: 35

dstmac

Set destination MAC address for mirrored traffic.

mac-address

Not Specified

traffic-type

Types of decrypted traffic to be mirrored.

option

-

Option

Description

ssl

Mirror decrypted SSL traffic.

ssh

Mirror decrypted SSH traffic.

traffic-source

Source of decrypted traffic to be mirrored.

option

-

Option

Description

client

Mirror client side decrypted traffic.

server

Mirror server side decrypted traffic.

both

Mirror both client and server side decrypted traffic.

config interface

Parameter

Description

Type

Size

name

Decrypted traffic mirror interface.

string

Maximum length: 64

config firewall decrypted-traffic-mirror

config firewall decrypted-traffic-mirror

Configure decrypted traffic mirror.

config firewall decrypted-traffic-mirror
    Description: Configure decrypted traffic mirror.
    edit <name>
        set dstmac {mac-address}
        set traffic-type [ssl|ssh]
        set traffic-source [client|server|...]
        config interface
            Description: Decrypted traffic mirror interface
            edit <name>
            next
        end
    next
end

config firewall decrypted-traffic-mirror

Parameter

Description

Type

Size

name

Name.

string

Maximum length: 35

dstmac

Set destination MAC address for mirrored traffic.

mac-address

Not Specified

traffic-type

Types of decrypted traffic to be mirrored.

option

-

Option

Description

ssl

Mirror decrypted SSL traffic.

ssh

Mirror decrypted SSH traffic.

traffic-source

Source of decrypted traffic to be mirrored.

option

-

Option

Description

client

Mirror client side decrypted traffic.

server

Mirror server side decrypted traffic.

both

Mirror both client and server side decrypted traffic.

config interface

Parameter

Description

Type

Size

name

Decrypted traffic mirror interface.

string

Maximum length: 64