Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
slouw
Contributor

show config, show config all

Generally from a given vdom it is possible to issue the following to get the config including ALL DEFAULT settings:

show full-configuration

I know also that I can get what I would understand to be NON DEFAULT settings for given sections of the config from commands such as the following (this is by no means of course an exhaustive list):

show system interface

show vpn ipsec phase1-interface

show vpn ipsec phase2-interface

show router bgp

Etc

My question is there a command equivalent to show full-configuration above that will give just the NON DEFAULT settings i.e. all that has changed since the last factory-reset?

Hope this makes sense

Thanks

1 Solution
abarushka

Hello,

 

Some parts of configuration will be still visible. For instance VDOM settings under interface. There is no default setting for VDOM setting even if there is only one VDOM. It is not possible to create interface without VDOM setting or run "unset vdom" command either.

FortiGate

View solution in original post

4 REPLIES 4
abarushka
Staff
Staff

Hello,

 

You may consider to run just "show" instead of "show full-configuration".

FortiGate
slouw

Thanks @abarushka 

Useful looking command

If I factory reset a FG box then issue the show command should I then get no output?

abarushka

Hello,

 

Some parts of configuration will be still visible. For instance VDOM settings under interface. There is no default setting for VDOM setting even if there is only one VDOM. It is not possible to create interface without VDOM setting or run "unset vdom" command either.

FortiGate
mle2802
Staff
Staff

Hi @slouw

I think the show or show full just give the current config. In order to show the changes since last reset, you may want to look at log or revision and compare the config.

Regards,
Minh

Labels
Top Kudoed Authors