Technical Tip: How to check referenced objects

Description

This article describes how to check where and how an object is being used via either the GUI or CLI.

Scope

FortiGate.

Solution

In the GUI:

In various locations of the GUI, look for the 'Ref.' column. 

If the 'Ref.' column is not visible, select the 'Configure Table' and make sure 'Ref.' is checked. 

To view the location of the referenced object, select the number in the 'Ref.' column, and the Object Usage window will appear, displaying the various locations of the referenced object:

Another way is to edit the object and select 'References'. 

To view more information about how the object is being used, select one of the following icons available within the Object Usage window:

1. View List: automatically redirects to the list page where the object is referenced at.

After selecting View List:

2. Edit: modifies settings within that particular setting that the object is referenced with.

After selecting Edit:

3. View Properties: shows a table, similar to the log viewer table, that contains information about what settings are configured within that particular setting the object is referenced with.

After selecting View Properties:
 

In the CLI:

diagnose system cmdb refcnt show <path.object.mkey> 

Or:

show full-configuration | grep -f wan1

Example:

diagnose system cmdb refcnt show system.interface.name wan1
entry used by table system.interface:name 'VPN_Winds_1'
entry used by table vpn.ipsec.phase1-interface:name 'VPN_Winds_1'
entry used by child table dstintf:name 'wan1' of table firewall.policy:policyid '1'
entry used by child table dstintf:name 'wan1' of table firewall.policy:policyid '2'
entry used by table router.static:seq-num '1'

Related articles:

Troubleshooting Tip: Verifying FortiGate configuration object references and dependencies

Technical Tip: How to check referenced objects