CLI Navigation and configuration
| ? | show available commands or options |
| tree | Display the complete command tree |
| tree diagnose | Display diagnostic commands |
| tree execute | Display execute commands |
| show | show non-default configuration |
| show full-configuration | show configuration including default settings |
| get | Show current settings, including defaults |
| config <section> | Enter configuration section |
| edit <name-or-ID> | Edit an entry |
| set <option> <value> | Set a value |
| unset <option> | Return an option to its default |
| next | Save the entry and move up one level |
| unset <option> | Return an option to its defaults |
| next | Save the entry and move up one level |
| end | Save changes and exit configuration mode |
| abort | Exit without saving the current changes |
Key use cases:
| get system status | Model, serial number, FortiOS version, uptime and operating mode |
| get system performance status | CPU, memory, sessions, throughput and uptime. |
| diagnose sys top 1 20 5 | Show the top 20 processes every second, fives times |
| diagnose debug crashlog read | show process crashes and system errors |
| diagnose hardware sysinfo conserve | check whether the firewall is in conserve mode (conserve mode is entered when RAM becomes dangerously low) |
| execute tac report | Generate diagnostic information for Fortinet TAC |
The Traceroute Blog 