Fortinet black logo

CLI Reference

config firewall decrypted-traffic-mirror

config firewall decrypted-traffic-mirror

Configure decrypted traffic mirror.

config firewall decrypted-traffic-mirror
    Description: Configure decrypted traffic mirror.
    edit <name>
        set dstmac {mac-address}
        set traffic-type [ssl|ssh]
        set traffic-source [client|server|...]
        config interface
            Description: Decrypted traffic mirror interface
            edit <name>
            next
        end
    next
end

config firewall decrypted-traffic-mirror

Parameter

Description

Type

Size

dstmac

Set destination MAC address for mirrored traffic.

mac-address

Not Specified

traffic-type

Types of decrypted traffic to be mirrored.

option

-

Option

Description

ssl

Mirror decrypted SSL traffic.

ssh

Mirror decrypted SSH traffic.

traffic-source

Source of decrypted traffic to be mirrored.

option

-

Option

Description

client

Mirror client side decrypted traffic.

server

Mirror server side decrypted traffic.

both

Mirror both client and server side decrypted traffic.

config firewall decrypted-traffic-mirror

config firewall decrypted-traffic-mirror

Configure decrypted traffic mirror.

config firewall decrypted-traffic-mirror
    Description: Configure decrypted traffic mirror.
    edit <name>
        set dstmac {mac-address}
        set traffic-type [ssl|ssh]
        set traffic-source [client|server|...]
        config interface
            Description: Decrypted traffic mirror interface
            edit <name>
            next
        end
    next
end

config firewall decrypted-traffic-mirror

Parameter

Description

Type

Size

dstmac

Set destination MAC address for mirrored traffic.

mac-address

Not Specified

traffic-type

Types of decrypted traffic to be mirrored.

option

-

Option

Description

ssl

Mirror decrypted SSL traffic.

ssh

Mirror decrypted SSH traffic.

traffic-source

Source of decrypted traffic to be mirrored.

option

-

Option

Description

client

Mirror client side decrypted traffic.

server

Mirror server side decrypted traffic.

both

Mirror both client and server side decrypted traffic.