Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ergotherego
Contributor II

CLI command to show all members in a nested address group?

Is there a CLI short-cut command that will show all members of a nested address group? Ie, trace the membership list all the way to the bottom, showing all of the children and sub-children?

2 REPLIES 2
emnoc
Esteemed Contributor III

You might beable todo;

 

 

 

diag sys checkused   firewall.addrgrp.name <groupname>

 

And then you have to do each member directly  via

 

show firewall address <addressname>

 

http://socpuppet.blogspot...-to-do-dependency.html

 

 

Just play around with it and see what you can come up with ;)

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
ergotherego

Thanks for the reply. Looks like that would help if you wanted to go bottom-up, but not the other way around.

 

I am going to take a look at using a TCL script from the FMG, might be the only way to do it inside of FortiWorld and not just parsing config files.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors