Skip to main content
tnazarov
Staff
Staff
October 23, 2024

Technical Tip: How to configure backend shell access

  • October 23, 2024
  • 0 replies
  • 1690 views
Description This article describes how to configure backend shell access.
Scope

FortiWeb v7.0.x to v7.6.2.

Solution

To access the backend shell, shell access must be enabled, and a temporary user/password must be created through the CLI first. Then, log in via SSH.

 

config system global

    set shell-access enable

    set shell-username testadmin

    set shell-password passforadmin

    set shell-timeout 1200 --> The shell-access will be disabled in 1200 minutes.

    set shell-history-size 1024 --> Record 1024 operations.

    set shell-trusthostv4 0.0.0.0/0 --> Source ip (ipv4) should in the trust-host address.

    set shell-trusthostv6 ::/0 --> Source ip (ipv6) should in the trust-host address.

end

 

shell-access.png

 

Log in to the backend shell using an SSH client:

 

puttyshell.png

 

shellputtylogin.png

 

Shell access is not available in version 7.4.1 and higher releases.

 

Shell access can only be gained through the console cable. To configure it, execute the following commands to enable shell access via the console:

 

config system console

    set shell sh
end

 

Now, proceed to access the unit through the console.
Note: The 'set shell sh' command is not available in release version 7.6.3 or above.