Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    Home FortiWeb 6.3.23 CLI Reference
    6.3.23
    7.6.1
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.3.23
    6.3.19
    6.3.18
    6.3.17
    6.3.16
    6.3.15
    6.3.14
    6.3.13
    6.3.11
    6.3.10
    6.3.9
    6.3.7
    6.3.6
    6.3.5
    6.3.4
    6.3.3
    6.3.2
    6.3.1
    6.3.0
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.1.2
    6.1.1
    5.7.0
    5.6.1
    5.6.0

    system fabric-connectors

    system fabric-connectors

    Use this command to notify the load balancer to distribute the traffic to the new primary node when fail-over occurs.

    Syntax

    config system fabric-connectors

    set name <string>

    set type {oci | azure}

    set tenant-ocid <string>

    set user-ocid <string>

    set compartment-ocid <string>

    set loadbalancer-ocid <string>

    set server-region-type {commercial | government}

    set server-region <region-id>

    set private-key <userdef>

    set rg-name <string>

    set sub-id <string>

    set tenant-id <string>

    set pass <passwd>

    set app-id <string>

    set nicFWBA <string>

    set nicFWBB <string>

    set public-ip <string>

    end

    Commands for OCI Active-Passive HA settings

    Variable

    Description

    Default

    tenant-ocid <string>

    To get the OCI tenant ID:

    1. Log in to OCI.
    2. Go to Governance and Administration > Administration > Tenancy Details.
    3. Click the Tenancy you want to use.
    4. Copy the OCID of this Tenancy.
    		No default

    user-ocid <string>

    To get the User ID:

    1. Log in to OCI.
    2. Go to Governance and Administration > Identity > User.
    3. Click the user you want to use.
    4. Copy the OCID of this user.
    		No default

    compartment-ocid <string>

    To get the OCI compartment ID:

    1. Log in to OCI.
    2. Go to Governance and Administration > Identity > Compartments.
    3. Click the compartment that your load balancer is located in.
    4. Copy the OCID of this Tenancy.

    Note: If you don't have a compartment, you can leave this option empty.

    		 No default

    loadbalancer-ocid <string>

    To get the OCI LoadBalancer ID:

    1. Log in to OCI.
    2. Go to Core Infrastructure > Networking > Load Balancers.
    3. Click the load balancer used for the HA cluster.
    4. Copy the OCID of this load balancer.
    		No default

    server-region-type {commercial | government}

    If your OCI server region is either “US Federal Cloud with DISA Impact Level 5 Authorization Regions” or “US Government Cloud with FedRAMP Authorization Regions”, please enter Government. Otherwise please select Commercial.

    commercial

    server-region <region-id>

    Enter the Region Identifier of your load balancer.

    No default

    private-key <userdef>

    		 Specify the private key you have generated

    for authentication when FortiWeb-VM connects to the load balancer.
    See Generating RSA key.

    		 No default
    Commands for Azure Active-Passive HA settings

    For Azure Active-Passive HA settings, it's recommended to configure the settings through GUI, where you can download a script to get the values. See Configuring Active-Passive HA.

    Variable

    Description

    Default

    rg-name <string>

    		 Enter the resource group name No default

    sub-id <string>

    		 Enter the subcription ID. No default

    tenant-id <string>

    		 Enter the tenant ID. No default

    pass <passwd>

    		 Enter the function applicaiton password. No default

    app-id <string>

    		 Enter the function applicaiton ID. No default

    nicFWBA <string>

    		 Enter the interface name in FWBA. No default

    nicFWBB <string>

    Enter the interface name in FWBB.

    No default

    public-ip <string>

    Enter the name of the master FortiWeb-VM's public IP.

    No default
    Previous
    Next

    system fabric-connectors

    system fabric-connectors

    Use this command to notify the load balancer to distribute the traffic to the new primary node when fail-over occurs.

    Syntax

    config system fabric-connectors

    set name <string>

    set type {oci | azure}

    set tenant-ocid <string>

    set user-ocid <string>

    set compartment-ocid <string>

    set loadbalancer-ocid <string>

    set server-region-type {commercial | government}

    set server-region <region-id>

    set private-key <userdef>

    set rg-name <string>

    set sub-id <string>

    set tenant-id <string>

    set pass <passwd>

    set app-id <string>

    set nicFWBA <string>

    set nicFWBB <string>

    set public-ip <string>

    end

    Commands for OCI Active-Passive HA settings

    Variable

    Description

    Default

    tenant-ocid <string>

    To get the OCI tenant ID:

    1. Log in to OCI.
    2. Go to Governance and Administration > Administration > Tenancy Details.
    3. Click the Tenancy you want to use.
    4. Copy the OCID of this Tenancy.
    		No default

    user-ocid <string>

    To get the User ID:

    1. Log in to OCI.
    2. Go to Governance and Administration > Identity > User.
    3. Click the user you want to use.
    4. Copy the OCID of this user.
    		No default

    compartment-ocid <string>

    To get the OCI compartment ID:

    1. Log in to OCI.
    2. Go to Governance and Administration > Identity > Compartments.
    3. Click the compartment that your load balancer is located in.
    4. Copy the OCID of this Tenancy.

    Note: If you don't have a compartment, you can leave this option empty.

    		 No default

    loadbalancer-ocid <string>

    To get the OCI LoadBalancer ID:

    1. Log in to OCI.
    2. Go to Core Infrastructure > Networking > Load Balancers.
    3. Click the load balancer used for the HA cluster.
    4. Copy the OCID of this load balancer.
    		No default

    server-region-type {commercial | government}

    If your OCI server region is either “US Federal Cloud with DISA Impact Level 5 Authorization Regions” or “US Government Cloud with FedRAMP Authorization Regions”, please enter Government. Otherwise please select Commercial.

    commercial

    server-region <region-id>

    Enter the Region Identifier of your load balancer.

    No default

    private-key <userdef>

    		 Specify the private key you have generated

    for authentication when FortiWeb-VM connects to the load balancer.
    See Generating RSA key.

    		 No default
    Commands for Azure Active-Passive HA settings

    For Azure Active-Passive HA settings, it's recommended to configure the settings through GUI, where you can download a script to get the values. See Configuring Active-Passive HA.

    Variable

    Description

    Default

    rg-name <string>

    		 Enter the resource group name No default

    sub-id <string>

    		 Enter the subcription ID. No default

    tenant-id <string>

    		 Enter the tenant ID. No default

    pass <passwd>

    		 Enter the function applicaiton password. No default

    app-id <string>

    		 Enter the function applicaiton ID. No default

    nicFWBA <string>

    		 Enter the interface name in FWBA. No default

    nicFWBB <string>

    Enter the interface name in FWBB.

    No default

    public-ip <string>

    Enter the name of the master FortiWeb-VM's public IP.

    No default
    Previous
    Next