Fortinet white logo
Fortinet white logo

CLI Reference

diagnose user

diagnose user

User

This topic includes the following commands:

diagnose user banned-ip

Banned IP addresses.

diagnose user banned-ip

diagnose user banned-ip add

Add banned IP address.

diagnose user banned-ip add

diagnose user banned-ip add src4

IPv4 source ban.

diagnose user banned-ip add src4 <src-ipv4> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip add src6

IPv6 source ban.

diagnose user banned-ip add src6 <src-ipv6> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip clear

Clear all banned IP addresses.

diagnose user banned-ip clear

diagnose user banned-ip delete

Delete banned IP address.

diagnose user banned-ip delete

diagnose user banned-ip delete src4

IPv4 source ban.

diagnose user banned-ip delete src4 <src-ipv4>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

diagnose user banned-ip delete src6

IPv6 source ban.

diagnose user banned-ip delete src6 <src-ipv6>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

diagnose user banned-ip list

List banned IPs.

diagnose user banned-ip list

diagnose user banned-ip list all

List all bans.

diagnose user banned-ip list all

diagnose user banned-ip list src4

IPv4 source ban.

diagnose user banned-ip list src4

diagnose user banned-ip list src6

IPv6 source ban.

diagnose user banned-ip list src6

diagnose user banned-ip stat

stat

diagnose user banned-ip stat

diagnose user banned-ip stress-test

IPv4 stress test for SRC bans.

diagnose user banned-ip stress-test <ipv4> <expiry> <ban-counts> <ban-source>

Parameter

Description

Type

Size

<ipv4>

Starting IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-counts>

Number of banned IP addresses.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

diagnose user device

User devices.

diagnose user device

diagnose user device clear

Clear discovered hosts.

diagnose user device clear

diagnose user device del

Remove a specific host.

diagnose user device del <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device filter

Filter for various src-vis diagnostics.

diagnose user device filter

diagnose user device filter addr

IPv4 address range.

diagnose user device filter addr <from> <to>

Parameter

Description

Type

Size

<from>

IPv4 address range.

string

<to>

IPv4 address range.

string

diagnose user device filter clear

Clear the filter or parameter.

diagnose user device filter clear

diagnose user device filter clear addr

Clear parameter.

diagnose user device filter clear addr

diagnose user device filter clear generation

Clear parameter.

diagnose user device filter clear generation

diagnose user device filter clear index

Clear parameter.

diagnose user device filter clear index

diagnose user device filter clear joined

Clear parameter.

diagnose user device filter clear joined

diagnose user device filter clear vd

Clear parameter.

diagnose user device filter clear vd

diagnose user device filter generation

Device generation.

diagnose user device filter generation <from> <to>

Parameter

Description

Type

Size

<from>

<from>

string

<to>

<to>

string

diagnose user device filter joined

Device is joined to another.

diagnose user device filter joined <value>

Parameter

Description

Type

Size

<value>

<value>

string

diagnose user device filter list

Display the current filter.

diagnose user device filter list

diagnose user device filter negate

Negate the specified filter parameter.

diagnose user device filter negate

diagnose user device filter negate addr

Negate parameter.

diagnose user device filter negate addr

diagnose user device filter negate generation

Negate parameter.

diagnose user device filter negate generation

diagnose user device filter negate index

Negate parameter.

diagnose user device filter negate index

diagnose user device filter negate joined

Negate parameter.

diagnose user device filter negate joined

diagnose user device filter negate vd

Negate parameter.

diagnose user device filter negate vd

diagnose user device filter vd

Index of virtual domain.

diagnose user device filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain.

string

diagnose user device get

List a specific host.

diagnose user device get <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device list

List known hosts.

diagnose user device list

diagnose user device stats

User device stats.

diagnose user device stats

diagnose user

diagnose user

User

This topic includes the following commands:

diagnose user banned-ip

Banned IP addresses.

diagnose user banned-ip

diagnose user banned-ip add

Add banned IP address.

diagnose user banned-ip add

diagnose user banned-ip add src4

IPv4 source ban.

diagnose user banned-ip add src4 <src-ipv4> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip add src6

IPv6 source ban.

diagnose user banned-ip add src6 <src-ipv6> <expiry> <ban-source> <creation-timestamp>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

<expiry>

Expiry in seconds.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

<creation-timestamp>

Optional, unix timestamp (seconds) for the creation date

string

diagnose user banned-ip clear

Clear all banned IP addresses.

diagnose user banned-ip clear

diagnose user banned-ip delete

Delete banned IP address.

diagnose user banned-ip delete

diagnose user banned-ip delete src4

IPv4 source ban.

diagnose user banned-ip delete src4 <src-ipv4>

Parameter

Description

Type

Size

<src-ipv4>

Source IPv4 address.

string

diagnose user banned-ip delete src6

IPv6 source ban.

diagnose user banned-ip delete src6 <src-ipv6>

Parameter

Description

Type

Size

<src-ipv6>

Source IPv6 address.

string

diagnose user banned-ip list

List banned IPs.

diagnose user banned-ip list

diagnose user banned-ip list all

List all bans.

diagnose user banned-ip list all

diagnose user banned-ip list src4

IPv4 source ban.

diagnose user banned-ip list src4

diagnose user banned-ip list src6

IPv6 source ban.

diagnose user banned-ip list src6

diagnose user banned-ip stat

stat

diagnose user banned-ip stat

diagnose user banned-ip stress-test

IPv4 stress test for SRC bans.

diagnose user banned-ip stress-test <ipv4> <expiry> <ban-counts> <ban-source>

Parameter

Description

Type

Size

<ipv4>

Starting IPv4 address.

string

<expiry>

Expiry in seconds.

string

<ban-counts>

Number of banned IP addresses.

string

<ban-source>

Ban source (admin/dlp/ips/av/dos/app).

string

diagnose user device

User devices.

diagnose user device

diagnose user device clear

Clear discovered hosts.

diagnose user device clear

diagnose user device del

Remove a specific host.

diagnose user device del <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device filter

Filter for various src-vis diagnostics.

diagnose user device filter

diagnose user device filter addr

IPv4 address range.

diagnose user device filter addr <from> <to>

Parameter

Description

Type

Size

<from>

IPv4 address range.

string

<to>

IPv4 address range.

string

diagnose user device filter clear

Clear the filter or parameter.

diagnose user device filter clear

diagnose user device filter clear addr

Clear parameter.

diagnose user device filter clear addr

diagnose user device filter clear generation

Clear parameter.

diagnose user device filter clear generation

diagnose user device filter clear index

Clear parameter.

diagnose user device filter clear index

diagnose user device filter clear joined

Clear parameter.

diagnose user device filter clear joined

diagnose user device filter clear vd

Clear parameter.

diagnose user device filter clear vd

diagnose user device filter generation

Device generation.

diagnose user device filter generation <from> <to>

Parameter

Description

Type

Size

<from>

<from>

string

<to>

<to>

string

diagnose user device filter joined

Device is joined to another.

diagnose user device filter joined <value>

Parameter

Description

Type

Size

<value>

<value>

string

diagnose user device filter list

Display the current filter.

diagnose user device filter list

diagnose user device filter negate

Negate the specified filter parameter.

diagnose user device filter negate

diagnose user device filter negate addr

Negate parameter.

diagnose user device filter negate addr

diagnose user device filter negate generation

Negate parameter.

diagnose user device filter negate generation

diagnose user device filter negate index

Negate parameter.

diagnose user device filter negate index

diagnose user device filter negate joined

Negate parameter.

diagnose user device filter negate joined

diagnose user device filter negate vd

Negate parameter.

diagnose user device filter negate vd

diagnose user device filter vd

Index of virtual domain.

diagnose user device filter vd <index>

Parameter

Description

Type

Size

<index>

Index of virtual domain.

string

diagnose user device get

List a specific host.

diagnose user device get <mac>

Parameter

Description

Type

Size

<mac>

MAC address (xx:xx:xx:xx:xx:xx).

string

diagnose user device list

List known hosts.

diagnose user device list

diagnose user device stats

User device stats.

diagnose user device stats