FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
syadav
Staff
Staff
Article Id 333305
Description

This article describes the differences between the command 'show' and 'show full-configuration'.

Scope

FortiGate.

Solution

The command ‘show’ displays the configuration that is changed from the default settings/attributes. 


Whereas the ‘show full-configuration' aka ‘show full’ display the configuration including the default settings/attributes.
 


The ‘show’ command in the below example displays the empty ‘system central-management' table, which means that all attributes are set to default values.
 

 

config system central-management 

show 

config system central-management 

end 

 

set type fortiguard  

show 

config system central-management

    set type fortiguard 

end 

 

However, after the ‘type’ attribute was changed from ‘none’ to ‘fortiguard’the output of 'show' command shows a 'type' attribute. 

 

The configuration snippet below shows the output of the ‘show full-configuration’, which includes the default attributes and non-default attributes.  The 'mode' attribute is set to 'normal', which is a default setting, and it was not visible in the output of the 'show' command.

 

show full-configuration  

config system central-management 

    set mode normal 

    set type fortiguard 

    set schedule-config-restore enable 

    set schedule-script-restore enable 

    set allow-push-configuration enable 

    set allow-push-firmware enable 

    set allow-remote-firmware-upgrade enable 

    set allow-monitor enable 

    set local-cert '' 

    set vdom "root" 

    set fmg-update-port 8890 

    set enc-algorithm high 

end 

 

See the FortiOS CLI reference for more information about the configuration attributes.

Contributors