show is about configuration
get is about status
filter use grep
grep -f will do grep per configuration section context and pinpoint the grepped word with arrows " <----"
show full-configuration system interface <port>
show system interface <port >
execute ping-options ?
execute ping-options adaptive-ping <enable|disable>
execute ping-options data-size <bytes>
execute ping-options df-bit {yes | no}
execute ping-options pattern <2-byte_hex>
execute ping-options interface <auto | interface_name>
execute ping-options interval <seconds>
execute ping-options repeat-count <repeats>
execute ping-options source {auto | <source-intf_ip>}
execute ping-options timeout <seconds>
execute ping-options tos <service_type>
execute ping-options ttl <hops>
execute ping-options validate-reply {yes | no}
execute ping-options view-settings
execute ping-options use-sdwan <yes | no>
execute ping-options reset
1. get router info routing-table all
get router info routing-table database
diag firewall proute list
2. diag sys top
diag sys kill
3. get system status
get system performance status ---- can find system uptime
get system arp
4. execute log filter category xxx
exe log filter field srcip x.x.x.x
execute log filter free-style "((srcip 172.16.1.1) or (dstip 172.16.1.2)) and (dstport 80 443 50-60)"
exe log display
5. config system global
set admin-https-redirect
6. config system global
set admin-lockout-duration 300 << 5 mins
set admin-lockout-threshold 5 << default is 3
7. config log disk setting << not available on VM.
set maxium-log-age 30 << days
8. config system global
set admin-maintainer disable << disable maintenance account which is serial#
9. two factor authentication with email or sms, the option only appear in GUI after config is done from CLI.
config system admin
edit admin1
set two-factor email
set email-tp admin1@gmail.com
or
set two-factor sms
set sm-phone 11234567
10. get system session list
diag sys session list
diag sys session filter src x.x.x.x << set up a filer first, other all sessions will be cleared.
diag sys session clear
11. diag hardware sysinfo conserve
config ips global
set fail-open
diag hardware sysinfo memory
config system settings
set opmode nat or transparent
execute ping-options reset
exe ping-options view-settings
exe traceroute
Comments
Post a Comment