Technical Tip: Get a phone directory from FortiFone-480 CLI

[JordAnge]

Description	This article describes how to get a phone directory from FortiFone-480 CLI. This procedure can be useful to analyze in deep some failures and issues displaying the directory like delays, contact missing, and others.
Scope	FortiFone-480.
Solution	1) Be sure to reach the subnet of FortiFone-480, and access the phone CLI by SSH. Host: IP-Address of your FON-480 Port: 22 (by default) 2) Log in using the default User and Password:  admin/23646. 3) With the 'Putty' tool, choose the option: Session -> Logging to change settings and save the logs. 4) Once the CLI is open, run the commands below to enter shell mode: diagnose debug system-control enable fnsysctl sh 5) Run the command below replacing the info in ‘<>’ based on the device’s configuration. export LDAPCONF=/etc/ldap.conf: bin/ldapsearch -h <FVC_IP-Address> -p 389 -P 3 -D cn=<extension-number>,ou=users,dc=fortivoice -w <´MAC-Add_FON-480´> -b ‘ou=other,dc=fortivoice’ -l 5 -o nettimeout=4 -LLL ‘(objectclass=person)’ -S cn -z 50 Example: export LDAPCONF=/etc/ldap.conf: bin/ldapsearch -h 192.168.20.20 -p 389 -P 3 -D cn=9603,ou=users,dc=fortivoice -w ´d4:76:a0:2f:d7:a8´ -b ‘ou=other,dc=fortivoice’ -l 5 -o nettimeout=4 -LLL ‘(objectclass=person)’ -S cn -z 50 6) The last command will display the whole directory with an LDAP connection from FortiFone-480 to the FortiVoice. Note: It is possible to perform in parallel a packet capture from the FortiVoice to analyze from both sides the behavior of the connection, getting the information sent by the FortiVoice and received by FortiFone-480.