Basic Troubleshooting Commands in Fortigate with Cisco Equivalent... https://lewypogi.wordpress.com/2018/03/13/basic-troubleshooting-co...

lewypogi

Basic Troubleshooting Commands in Fortigate with Cisco Equivalent Commands

Posted on March 13, 2018 by lewypogi

CISCO FORTIGATE

Layer 2 Tshoot

show ip interface brief show system interface

show ip arp diagnose ip arp list

show interface x/x get hardwarde nic <port #> / diagnose hardware
deviceinfo nic

show run interface x/x show system interface <port #>

Layer 3 Tshoot

show run show full-config

show ip route get router info routing-table all

show ip route x.x.x.x get router info routing-table details x.x.x.x

show ip bgp summary get router info bgp summary

show ip bgp neighbor x.x.x.x routes get router info bgp neighbors x.x.x.x routes

show ip bgp neighbor x.x.x.x advertised-routes get router info bgp neighbors x.x.x.x advertised-
routes

show ip bgp neighbor x.x.x.x received-routes get router info bgp neighbors x.x.x.x received-
routes

show run | sec router bgp show router bgp

show ip bgp x.x.x.x get router info bgp network x.x.x.x

show ip ospf neighbor get router info ospf neighbor

show ip ospf neighbor details get router info ospf neighbor detail all

show ip nat translation get system session list

clear ip nat translation diagnose system session clear

sh ip route summary get router info routing-table all

1 of 3 11/22/2022, 4:31 PM
Basic Troubleshooting Commands in Fortigate with Cisco Equivalent... https://lewypogi.wordpress.com/2018/03/13/basic-troubleshooting-co...

show run | sec route-map show router route-map

show run | sec ip prefix-list show router prefix-list

Miscellaneous

show process cpu history get system performance status

show process memory sorted diagnose sys top / diagnose sys top-summary

show logging execute log display

show version get system status

Debugging IP Traffic

access-list 1 permit ip host 10.10.10.10 eq host diagnose debug reset

8.8.8.8

access-list 1 permit ip host 8.8.8.8 eq host diagnose debug flow filter saddr 10.10.10.10
10.10.10.10

debug ip packet 99 detail diagnose debug flow filter daddr 8.8.8.8

undebug all diagnose debug flow show console enable

diagnose debug enable

diagnose debug flow trace start 10

diagnose debug disable

Session List

show conn | i 8.8.8.8 | 53 diagnose sys session filter clear

diagnose sys session filter dst 8.8.8.8

diagnose sys session filter dport 53

diagnose sys session list

Ping and Traceroute

ping 8.8.8.8 source10.10.10.10 execute ping-options source 10.10.10.10

execute ping 8.8.8.8

traceroute 8.8.8.8 source10.10.10.10 execute traceroute-options source 10.10.10.10

execute traceroute 8.8.8.8

Remote Access MGMT (Telnet and SSH)

telnet x.x.x.x execute telnet x.x.x.x

ssh -l admin x.x.x.x execute ssh admin@x.x.x.x

2 of 3 11/22/2022, 4:31 PM
Basic Troubleshooting Commands in Fortigate with Cisco Equivalent... https://lewypogi.wordpress.com/2018/03/13/basic-troubleshooting-co...

About lewypogi
My Social Accounts: www.facebook.com/lewy.dalumpines ph.linkedin.com/in/jeremiahdalumpines
twitter.com/lewydalumpines learningnetwork.cisco.com/people/jeremiahlewdalumpines
View all posts by lewypogi →

This entry was posted in asa, authentication, bgp, cisco, dynamic, eigrp, failover, firewall, gre, gre over ipsec, ios, ipsec, isakmp, l3vpn, lan to lan vpn, lewy, lewy11, lewypogi,
link, mode, monitoring, static, switch, tunnel, tunneling, Uncategorized, vpn and tagged asa, cisco, debug, firewall, fortigate, fortinet, layer2, layer3, router, switch,
troubleshooting, tshoot. Bookmark the permalink.

lewypogi
Create a free website or blog at WordPress.com.
Do Not Sell or Share My Personal Information

3 of 3 11/22/2022, 4:31 PM