Technical Tip: How to disable FortiGate interface using an automation stitch

[kajlasunil]

Description	This article describes that if the WAN connection is metered (charged per GB), disabling it after business hours can avoid unnecessary data consumption.
Scope	FortiGate.
Solution	To reduce data usage, The FortiGate can be configured to disable the interface automatically after business hours using an automation stitch. Use an Automation Script to Disable the Interface. Create an Automation Stitch: Go to Security Fabric -> Automation. Select Create New -> Stitch. Choose Trigger Type: Scheduled. Set the schedule for when the interface should be disabled. Add an Action to Disable the Interface: Select Action: Execute CLI Script. Use the following CLI command: config system automation-stitch     edit "Disable_Interface"         set trigger "After_Hour"         config actions             edit 1                 set action "Disable Interface"                 set required enable             next         end     next end config system automation-action     edit "Disable Interface"         set action-type cli-script         set script "config system interface                     edit wan                     set status down                     next                     end"         set accprofile "super_admin"     next end config system automation-trigger     edit "After_Hour"         set trigger-type scheduled         set trigger-hour 5     next end Save and test. Create Another Stitch to Re-enable the Interface. Follow the same steps but set the status to 'up' in the script. Related article: Technical Tip: Automation Stitch to shutdown wan interface if SLA fails