Wednesday, 9 October 2013

Fortinet - FortiOS - See CLI commands being executed by changes in the GUI

Overview

This blog post will guide you through how to view the CLI commands that are being executed in the background when you make a change to the configuration in the GUI.

OS Version

FortiOS: v4.2.X, v4.3.X, v5.0.X

Steps to Follow


You will perform the following:

a. Open a CLI connection to the FortiGate
b. Enable debugger and CLI debug level output
c. Make a change in the GUI 
d. See the CLI commands being executed

e. Clear the debugger



a. Open a CLI connection to the FortiGate


In the below capture I'm initiaed the CLI console from the GUI. THis is done by click on the CLI window. This is found under "System" -> "Dashboard" -> "Status"




b. Enable debugger and CLI level debug output

The following are the cli commands that you would want to use to enable the debugger. The first two lines will clear the existing debugger if there was a previous debugger initiated. 

diag debug cli 8 will enable level 8 debug output. This will capture any changes done by modify configuration in the GUI.

diag debug en will enable the debugger and output the gui changes. 



















c. Make a change in the GUI

In this example I will create an address group in the gui. 













d. See the CLI commands being executed

Pulling up the CLI window after the GUI change has been done will show you the CLI commands executed.









d. Clear the debugger

Its always good habit to clear the debugger when you are done.



No comments:

Post a Comment