Hi,
Is there a command to remove a virtual ip, without using the gui?
I am using a serial connection to my Fortigate 201e.
I've been locked out and can't connect to it over https.
Thanks!
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
FW1 # config firewall vip
FW1 (vip) # show config firewall vip edit "1" set extip 192.168.88.25 set extintf "port1" set mappedip "10.0.3.11" next end
FW1 (vip) # delete 1
FW1 (vip) # end
Fortigate is fully manageable via CLI as well.
1. Find the policy ID where your VIP is used :
show firewall policy
2. Either delete the policy completely or disable it:
a) Delete (make sure you use correct policy id), e.g. you want to delete policy with id 2:
config firewall policy
delete 2
end
b) Disable, e.g. policy id 2:
config firewall policy
edit 2
set status disable
next
end
There can be slight delay between entering the commands and FG actually cleaning its connection table for this VIP.
FW1 # config firewall vip
FW1 (vip) # show config firewall vip edit "1" set extip 192.168.88.25 set extintf "port1" set mappedip "10.0.3.11" next end
FW1 (vip) # delete 1
FW1 (vip) # end
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1517 | |
1018 | |
749 | |
443 | |
209 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.