cannot enable diagnostic cli

Forum|Forum|1 year ago
November 5, 2024
2 replies
1702 views

Hi,

I am trying to enable diagnostic cli. when i enable "permit usage of cli diagnostic commands" and click ok it automatically gets disabled upon revisiting this setting. the membership of the account from which this is done has Read write access to all. What could be the reason ? how to enable it ?

regards

FortiGate

funkylicious

SuperUser

Hi,

If I'm not mistaken, only a super_admin account profile can change the settings of the admin profiles.

And this applies from 7.4.2 , https://docs.fortinet.com/document/fortigate/7.4.4/fortios-release-notes/641069/cli-system-permissions

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Granting-read-only-admins-with-diagnose-commands/ta-p/223742

"jack of all trades, master of none"

AK-khanAuthor

New Member

there is no user named super_admin.

there are few users all are members of "Network Administrator" group and that gorup has all access.

funkylicious

SuperUser

I dont mean a user called super_admin, but a profile assigned to the user that does the changes for the specific setting.

For example, the default user admin has this profile assigned to it.

"jack of all trades, master of none"

gonipco2

New Member

You are connecting into a an established session resulting in a nested session. I forget exactly what you need to do but it is an escape sequence. Try the ssh escape sequence "<enter><enter>~~." and the telnet escape sequece "<ctrl>+]".

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded