Fortinet black logo

CLI Reference

config system global

config system global

Use this command to manage system settings.

Before you begin:

  • You must have read-write permission for system settings.

Syntax

config system global

set admin-idle-timeout <integer>

set config-sync {enable|disable}

set default-certificate <certname>

set hardware-ssl {enable|disable}

set hostname <string>

set language {english|chinese-simplified}

set port-http <integer>

set port-https <integer>

set port-ssh <integer>

set port-telnet <integer>

set share-ip-address {enable|disable}

set ssh-cbc-cipher {enable|disable}

set ssh-hmac-md5 {enable|disable}

set vdom-admin {enable|disable>

end

admin-idle-timeout

Log out an idle administrator session. The default is 30 minutes.

config-sync

Enable/disable the configuration synchronization feature. This feature is related to the execute config-sync command, not HA synchronization. Disabled by default.

default-certificate

The default is Factory.

hardware-ssl

Enable/disable hardware SSL acceleration. The setting has no effect on FortiADC-VM.

hostname

You can configure a hostname to facilitate system management. If you use SNMP, for example, the SNMP system name is derived from the configured hostname.

The hostname can be up to 35 characters in length. It can include US-ASCII letters, numbers, hyphens, and underscores, but not spaces and special characters.

The System Information widget and the get system status CLI command display the full hostname. If the hostname is longer than 16 characters, the name is truncated and ends with a tilde ( ~ ) to indicate that additional characters exist, but are not displayed.

language

English or Simplified Chinese.

port-http

Specify the port for the HTTP service. Usually, HTTP uses port 80.

port-https

Specify the port for the HTTPS service. Usually, HTTPS uses port 443.

port-ssh

Specify the port for the SSH service. Usually, SSH uses port 22.

port-telnet

Specify the port for the Telnet service. Usually, Telnet uses port 25.

share-ip-address

Enable this option to share NAT IP pools/addresses between L4 and L7 virtual servers.

ssh-cbc-cipher

Disabled by default. Enable if you want to use this cipher.

ssh-hmac-md5

Disabled by default. Enable if you want to use this cipher.

vdom-admin

Enables the virtual domain feature.

Example

FortiADC-VM # get system global
				default-certificate           : Factory
				hostname                      : FortiADC-VM
				vdom-admin                    : disable
				admin-idle-timeout            : 480
				port-http                     : 80
				port-https                    : 443
				port-ssh                      : 22
				port-telnet                   : 23
				language                      : english
				hardware-ssl                  : enable
				gui-system                    : enable
				gui-router                    : enable
				gui-log                       : enable
				ssh-cbc-cipher                : disable
				ssh-hmac-md5                  : disable
				config-sync-enable            : disable
			

config system global

Use this command to manage system settings.

Before you begin:

  • You must have read-write permission for system settings.

Syntax

config system global

set admin-idle-timeout <integer>

set config-sync {enable|disable}

set default-certificate <certname>

set hardware-ssl {enable|disable}

set hostname <string>

set language {english|chinese-simplified}

set port-http <integer>

set port-https <integer>

set port-ssh <integer>

set port-telnet <integer>

set share-ip-address {enable|disable}

set ssh-cbc-cipher {enable|disable}

set ssh-hmac-md5 {enable|disable}

set vdom-admin {enable|disable>

end

admin-idle-timeout

Log out an idle administrator session. The default is 30 minutes.

config-sync

Enable/disable the configuration synchronization feature. This feature is related to the execute config-sync command, not HA synchronization. Disabled by default.

default-certificate

The default is Factory.

hardware-ssl

Enable/disable hardware SSL acceleration. The setting has no effect on FortiADC-VM.

hostname

You can configure a hostname to facilitate system management. If you use SNMP, for example, the SNMP system name is derived from the configured hostname.

The hostname can be up to 35 characters in length. It can include US-ASCII letters, numbers, hyphens, and underscores, but not spaces and special characters.

The System Information widget and the get system status CLI command display the full hostname. If the hostname is longer than 16 characters, the name is truncated and ends with a tilde ( ~ ) to indicate that additional characters exist, but are not displayed.

language

English or Simplified Chinese.

port-http

Specify the port for the HTTP service. Usually, HTTP uses port 80.

port-https

Specify the port for the HTTPS service. Usually, HTTPS uses port 443.

port-ssh

Specify the port for the SSH service. Usually, SSH uses port 22.

port-telnet

Specify the port for the Telnet service. Usually, Telnet uses port 25.

share-ip-address

Enable this option to share NAT IP pools/addresses between L4 and L7 virtual servers.

ssh-cbc-cipher

Disabled by default. Enable if you want to use this cipher.

ssh-hmac-md5

Disabled by default. Enable if you want to use this cipher.

vdom-admin

Enables the virtual domain feature.

Example

FortiADC-VM # get system global
				default-certificate           : Factory
				hostname                      : FortiADC-VM
				vdom-admin                    : disable
				admin-idle-timeout            : 480
				port-http                     : 80
				port-https                    : 443
				port-ssh                      : 22
				port-telnet                   : 23
				language                      : english
				hardware-ssl                  : enable
				gui-system                    : enable
				gui-router                    : enable
				gui-log                       : enable
				ssh-cbc-cipher                : disable
				ssh-hmac-md5                  : disable
				config-sync-enable            : disable