Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ergotherego
Contributor II

CLI command to show all members in a nested address group?

Is there a CLI short-cut command that will show all members of a nested address group? Ie, trace the membership list all the way to the bottom, showing all of the children and sub-children?

2 REPLIES 2
emnoc
Esteemed Contributor III

You might beable todo;

 

 

 

diag sys checkused   firewall.addrgrp.name <groupname>

 

And then you have to do each member directly  via

 

show firewall address <addressname>

 

http://socpuppet.blogspot...-to-do-dependency.html

 

 

Just play around with it and see what you can come up with ;)

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
ergotherego

Thanks for the reply. Looks like that would help if you wanted to go bottom-up, but not the other way around.

 

I am going to take a look at using a TCL script from the FMG, might be the only way to do it inside of FortiWorld and not just parsing config files.

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors