自己整理的FortiGate 飞塔 防火墙查看密令

 

show system interface  查看接口配置
get system inter physical   查看物理接口状态，，如果不加 physical 参数可以显示逻辑 vpn 
get router info routing-table static  查看路由表中的静态路由
show system dns  查看 dns 的相关配置
get router info routing-table all   查看全局路由表
diagnose sys session stat
diagnose sys session full-stat 查看当前会话表
execute factoryreset  命令重置
diagnose sys sdwan health-check   查看 sdwan 
get sys arp | grep -f <ip address> 查看mac
diag ip arp delete <interface> <ip address

查看设备会话：
# config vdom
# edit NAT（进入需要查看会话的 VDOM）
# diagnose sys session filter dst 114.114.114.114
# diagnose sys session filter dport 53
# diagnose sys session filter
session filter:
 vd: any
 sintf: any
 dintf: any
 proto: any
 proto-state: any
 source ip: any
 NAT'd source ip: any
 dest ip: 114.114.114.114-114.114.114.114
 source port: any
 NAT'd source port: any
 dest port: 53-53
 policy id: any
 expire: any
 duration: any
 state1: any
 state2: any
# diagnose sys session list