诊断日志测试//测试日志记录

9.执行命令 - ping

FGT30D＃ execute ping www.google.ca
PING www.google.ca (173.194.46.111): 56 data bytes
64 bytes from 173.194.46.111: icmp_seq=0 ttl=57 time=20.7 ms
64 bytes from 173.194.46.111: icmp_seq=1 ttl=57 time=22.7 ms
64 bytes from 173.194.46.111: icmp_seq=2 ttl=57 time=20.6 ms
--- www.google.ca ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 20.6/21.3/22.7 ms

设置ping源：

FGT30D＃ execute ping-options source 192.168.1.1
FGT30D # execute ping-options viewPing Options:
        Repeat Count: 5
        Data Size: 56
        Timeout: 2
        Interval: 1
        TTL: 64
        TOS: 0
        DF bit: unset
        Source Address: 192.168.1.1
        Pattern:
        Pattern Size in Bytes: 0
        Validate Reply: no
Note: ping-options will reset when session closed

10.超时配置

为避免管理员远离管理计算机的可能性并将其暴露在未经授权的人员外，您可以添加空闲超时。也就是说，如果基于Web的管理器未用于指定的时间量，则FortiGate单元将自动记录管理员掉。要继续工作，他们必须再次登录。

超时可以设置为高达480分钟，或八小时，虽然这不推荐。

设置空闲时间，转到 系统> Settings 并输入空闲超时的时间。最好的做法是保持5分钟的默认值。

使用SSH登录控制台时，要成功登录FortiGate单元的默认时间是120秒（2分钟）。您可以使用CLI配置要缩短的时间来更改命令提示符在FortiGate Unit之前将记录管理员熄灭的时间长度仍然空闲。范围可以在10到3600秒之间。要设置注销时间，请输入以下CLI命令：

配置系统全局

set admin-ssh-grace-time <number_of_seconds>

end

11.备份/恢复配置到闪存

FGT30D＃ execute backup config flash  
Please wait...
Config backed up to flash disk done.
Setting timestamp
FGT30D # execute revision list config 
Last Firmware Version: V0.0.0-build000-REL0
ID TIME                   ADMIN                 FIRMWARE VERSION        COMMENT
 1 2015-02-10 13:39:29    jn                  V5.0.0-build292-REL0
 2 2015-02-10 13:42:15    jn                  V5.0.0-build292-REL0    20140210

从Flash还原配置：

FGT30D＃ execute restore config flash
<revision>    Revision ID on the flash.

FGT30D # execute restore config flash 2
This operation will overwrite the current settings!
你要继续吗？ （y / n）y
Please wait...
Get config from local disk OK.
File check OK.

12.重置系统到工厂 

13.检查界面状态（速度/双工）

FGT30D3X1502126 $ get system interface physical
== [onboard]
        ==[lan]
                mode: static
                ip: 10.9.14.8 255.255.255.0
                ipv6: ::/0
                status: up
                speed: 1000Mbps (Duplex: full)
        ==[wan]
                mode: static
                ip: 10.9.16.8 255.255.255.0
                ipv6: ::/0
                status: up
                speed: 1000Mbps (Duplex: full)
        ==[modem]
                mode: pppoe
                ip: 0.0.0.0 0.0.0.0
                ipv6: ::/0
                status: down
                speed: n/a

FGT30D3X1502126 $ get hardware nic lan
Driver Name     :Fortinet NP4Lite Driver
Version         :1.0.1
Admin           :up
Current_HWaddr   90:6c:ac:13:45:88
Permanent_HWaddr 90:6c:ac:13:45:88
Status          :up
Speed           :1000
Duplex          :Full
Host Rx Pkts    :1252679
Host Rx Bytes   :91142924
Host Tx Pkts    :88665
Host Tx Bytes   :11744688
Rx Pkts         :1211790
Rx Bytes        :106073828
Tx Pkts         :75589
Tx Bytes        :111560468
rx_buffer_len   :2048
Hidden          :No
cmd_in_list     : 0
promiscuous     : 1

FGT30D3X1502126 $ diag netlink interface list lan

if=lan family=00 type=1 index=3 mtu=1500 link=0 master=0
ref=16 state=start present fw_flags=8000 flags=up broadcast run allmulti multicast 
Qdisc=pfifo_fast hw_addr=90:6c:ac:13:45:88 broadcast_addr=ff:ff:ff:ff:ff:ff
stat: rxp=1218030 txp=75593 rxb=106620201 txb=111560708 rxe=0 txe=0 rxd=0 txd=0 mc=0 collision=0
re: rxl=0 rxo=0 rxc=0 rxf=0 rxfi=0 rxm=0
te: txa=0 txc=0 txfi=0 txh=0 txw=0
misc rxc=0 txc=0 stop=0
input_type=0 state=6 arp_entry=5 refcnt=16

14.时间和日期或NTP

通过配置NTP CLI.

通过通过手动设置日期和时间 CLI.