FORTIGATE 60 FIREWALL CLI CONFIGURATION

This article will show you how to configure Fortigate 60 from the Command Line Interface.

Configure Interface

Fortiget-60 # config system interface
edit internal
set ip 192.168.2.1 255.255.255.0
set mode static
next
edit wan1
set ip 192.168.3.1 255.255.255.0
next
edit internal
set ip 192.168.100.1 255.255.255.0
set dhcp-server-mode none (Set DHCP Server Mode Off)
next
edit wan1
set ip 192.168.1.2 255.255.255.0
show system interface (Check interface configuration)

Configure DNS

Fortiget-60 # config system dns
set primary 165.21.83.88
set secondary 165.21.100.88
end

Configure Internal Allowaccess (ping, https)

Fortiget-60 # config system interface
edit internal
unset allowaccess
set allowaccess ping
set allowaccess https
end

Configure Wan1 Allowaccess (ping)

Fortiget-60 # config system interface
edit wan1
unset allowaccess
set allowaccess ping
end

Configure Static Route

Fortiget-60 # config router static
edit 1
set device wan1
set dst 0.0.0.0 0.0.0.0
set gateway 192.168.1.1
set distance 10

Change Admin Password

Fortiget-60 # config system admin
edit admin
set password
end

Firmware Upgrade

To upgrade the FortiGate firmware from the CLI:

1 Make sure that the TFTP server is running.
2 Copy the new firmware image file to the root directory of your TFTP server.
3 Log into the CLI as the admin administrative user.

Fortiget-60 # execute restore image