Fortinet white logo
Fortinet white logo

CLI Reference

config vpn ssl client

config vpn ssl client

Client.

config vpn ssl client
    Description: Client.
    edit <name>
        set certificate {string}
        set class-id {integer}
        set comment {var-string}
        set distance {integer}
        set interface {string}
        set ipv4-subnets {string}
        set ipv6-subnets {string}
        set peer {string}
        set port {integer}
        set priority {integer}
        set psk {password-3}
        set realm {string}
        set server {string}
        set source-ip {string}
        set status [enable|disable]
        set user {string}
    next
end

config vpn ssl client

Parameter

Description

Type

Size

Default

certificate

Certificate to offer to SSL-VPN server if it requests one.

string

Maximum length: 35

class-id

Traffic class ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

comment

Comment.

var-string

Maximum length: 255

distance

Distance for routes added by SSL-VPN.

integer

Minimum value: 1 Maximum value: 255

10

interface

SSL interface to send/receive traffic over.

string

Maximum length: 15

ipv4-subnets

IPv4 subnets that the client is protecting.

string

Maximum length: 79

ipv6-subnets

IPv6 subnets that the client is protecting.

string

Maximum length: 79

name

SSL-VPN tunnel name.

string

Maximum length: 35

peer

Authenticate peer's certificate with the peer/peergrp.

string

Maximum length: 35

port

SSL-VPN server port.

integer

Minimum value: 1 Maximum value: 65535

443

priority

Priority for routes added by SSL-VPN.

integer

Minimum value: 1 Maximum value: 65535

1

psk

Pre-shared secret to authenticate with the server (ASCII string or hexadecimal encoded with a leading 0x).

password-3

Not Specified

realm

Realm name configured on SSL-VPN server.

string

Maximum length: 35

server

IPv4, IPv6 or DNS address of the SSL-VPN server.

string

Maximum length: 63

source-ip

IPv4 or IPv6 address to use as a source for the SSL-VPN connection to the server.

string

Maximum length: 63

status

Enable/disable this SSL-VPN client configuration.

option

-

enable

Option

Description

enable

Enable the SSL-VPN configuration.

disable

Disable the SSL-VPN configuration.

user

Username to offer to the peer to authenticate the client.

string

Maximum length: 35

config vpn ssl client

config vpn ssl client

Client.

config vpn ssl client
    Description: Client.
    edit <name>
        set certificate {string}
        set class-id {integer}
        set comment {var-string}
        set distance {integer}
        set interface {string}
        set ipv4-subnets {string}
        set ipv6-subnets {string}
        set peer {string}
        set port {integer}
        set priority {integer}
        set psk {password-3}
        set realm {string}
        set server {string}
        set source-ip {string}
        set status [enable|disable]
        set user {string}
    next
end

config vpn ssl client

Parameter

Description

Type

Size

Default

certificate

Certificate to offer to SSL-VPN server if it requests one.

string

Maximum length: 35

class-id

Traffic class ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

comment

Comment.

var-string

Maximum length: 255

distance

Distance for routes added by SSL-VPN.

integer

Minimum value: 1 Maximum value: 255

10

interface

SSL interface to send/receive traffic over.

string

Maximum length: 15

ipv4-subnets

IPv4 subnets that the client is protecting.

string

Maximum length: 79

ipv6-subnets

IPv6 subnets that the client is protecting.

string

Maximum length: 79

name

SSL-VPN tunnel name.

string

Maximum length: 35

peer

Authenticate peer's certificate with the peer/peergrp.

string

Maximum length: 35

port

SSL-VPN server port.

integer

Minimum value: 1 Maximum value: 65535

443

priority

Priority for routes added by SSL-VPN.

integer

Minimum value: 1 Maximum value: 65535

1

psk

Pre-shared secret to authenticate with the server (ASCII string or hexadecimal encoded with a leading 0x).

password-3

Not Specified

realm

Realm name configured on SSL-VPN server.

string

Maximum length: 35

server

IPv4, IPv6 or DNS address of the SSL-VPN server.

string

Maximum length: 63

source-ip

IPv4 or IPv6 address to use as a source for the SSL-VPN connection to the server.

string

Maximum length: 63

status

Enable/disable this SSL-VPN client configuration.

option

-

enable

Option

Description

enable

Enable the SSL-VPN configuration.

disable

Disable the SSL-VPN configuration.

user

Username to offer to the peer to authenticate the client.

string

Maximum length: 35