Basic Troubleshooting Commands in Fortigate with Cisco Equivalent... https://lewypogi.wordpress.com/2018/03/13/basic-troubleshooting-co...
lewypogi
Basic Troubleshooting Commands in Fortigate with Cisco Equivalent Commands
Posted on March 13, 2018 by lewypogi
CISCO FORTIGATE
Layer 2 Tshoot
show ip interface brief show system interface
show ip arp diagnose ip arp list
show interface x/x get hardwarde nic <port #> / diagnose hardware
deviceinfo nic
show run interface x/x show system interface <port #>
Layer 3 Tshoot
show run show full-config
show ip route get router info routing-table all
show ip route x.x.x.x get router info routing-table details x.x.x.x
show ip bgp summary get router info bgp summary
show ip bgp neighbor x.x.x.x routes get router info bgp neighbors x.x.x.x routes
show ip bgp neighbor x.x.x.x advertised-routes get router info bgp neighbors x.x.x.x advertised-
routes
show ip bgp neighbor x.x.x.x received-routes get router info bgp neighbors x.x.x.x received-
routes
show run | sec router bgp show router bgp
show ip bgp x.x.x.x get router info bgp network x.x.x.x
show ip ospf neighbor get router info ospf neighbor
show ip ospf neighbor details get router info ospf neighbor detail all
show ip nat translation get system session list
clear ip nat translation diagnose system session clear
sh ip route summary get router info routing-table all
1 of 3 11/22/2022, 4:31 PM
Basic Troubleshooting Commands in Fortigate with Cisco Equivalent... https://lewypogi.wordpress.com/2018/03/13/basic-troubleshooting-co...
show run | sec route-map show router route-map
show run | sec ip prefix-list show router prefix-list
Miscellaneous
show process cpu history get system performance status
show process memory sorted diagnose sys top / diagnose sys top-summary
show logging execute log display
show version get system status
Debugging IP Traffic
access-list 1 permit ip host 10.10.10.10 eq host diagnose debug reset
8.8.8.8
access-list 1 permit ip host 8.8.8.8 eq host diagnose debug flow filter saddr 10.10.10.10
10.10.10.10
debug ip packet 99 detail diagnose debug flow filter daddr 8.8.8.8
undebug all diagnose debug flow show console enable
diagnose debug enable
diagnose debug flow trace start 10
diagnose debug disable
Session List
show conn | i 8.8.8.8 | 53 diagnose sys session filter clear
diagnose sys session filter dst 8.8.8.8
diagnose sys session filter dport 53
diagnose sys session list
Ping and Traceroute
ping 8.8.8.8 source10.10.10.10 execute ping-options source 10.10.10.10
execute ping 8.8.8.8
traceroute 8.8.8.8 source10.10.10.10 execute traceroute-options source 10.10.10.10
execute traceroute 8.8.8.8
Remote Access MGMT (Telnet and SSH)
telnet x.x.x.x execute telnet x.x.x.x
ssh -l admin x.x.x.x execute ssh admin@x.x.x.x
2 of 3 11/22/2022, 4:31 PM
Basic Troubleshooting Commands in Fortigate with Cisco Equivalent... https://lewypogi.wordpress.com/2018/03/13/basic-troubleshooting-co...
About lewypogi
My Social Accounts: www.facebook.com/lewy.dalumpines ph.linkedin.com/in/jeremiahdalumpines
twitter.com/lewydalumpines learningnetwork.cisco.com/people/jeremiahlewdalumpines
View all posts by lewypogi →
This entry was posted in asa, authentication, bgp, cisco, dynamic, eigrp, failover, firewall, gre, gre over ipsec, ios, ipsec, isakmp, l3vpn, lan to lan vpn, lewy, lewy11, lewypogi,
link, mode, monitoring, static, switch, tunnel, tunneling, Uncategorized, vpn and tagged asa, cisco, debug, firewall, fortigate, fortinet, layer2, layer3, router, switch,
troubleshooting, tshoot. Bookmark the permalink.
lewypogi
Create a free website or blog at WordPress.com.
Do Not Sell or Share My Personal Information
3 of 3 11/22/2022, 4:31 PM