The rest of matching and conditions remain of the same syntax.ĭiagnose debug flow show function-name enable Same as diagnose debug filter but for IPv6 packets. Port - Source or/and destination port in the packet(s).ĭport - Destination port of the packet(s). Saddr - IP source address of the packet(s).ĭaddr - IP destination address of the packet(s). Fortigate translates the name to VDOM ID ( vd).Īddr - IP address of the packet(s), be it a destination or/and a source. Vd-name - limit debug to specific VDOM by its name. When entering the vdom with edit vdom, this number is shown first. You can set multiple filters - act as AND, by issuing this command multiple times. Set filter for security rulebase processing packets output. Remove any filtering of the debug output set Show the active filter for the flow debug Policy lookup for any combination of IPs and ports - use to see what policy (ifĪny) matches traffic between specific IP addresses and ports.
Security rulebase diagnostics with diagnose debug flow Command
0 kommentar(er)
