Debug logs
Extended debug logs can be accessed by using your web browser to browse to https://<FortiAuthenticator-IP-Address>/debug.
| Service |
Select the service whose logs are shown from the dropdown menu:
Note: The CLI Packet Capture (tcpdumpfile) service is only available when the |
|
Debug Kit |
Select Upload a file to upload a debug kit from your computer. Note: The option is only available for some services. |
| Max. log files size |
From the dropdown, select the maximum log file size. You can select up to a maximum of 500 MB. This gives you access to an extended history of debug files. Note: The option is only available for certain debug log types. |
| Enter debug mode |
If HA or RADIUS Authentication is selected as the service, the option to enter the debug mode is available. See RADIUS debugging. |
|
Enter detail debugging mode |
If RADIUS Authentication is selected as the service and you are already in the debug mode, the option to enter the detailed debugging mode is available. See RADIUS debugging. |
| Search | Enter a search term in the search field, then select Search to search the debug logs. |
| Page navigation | Use the First Page, Previous Page, Next Page, and Last Page icons to navigated through the logs. |
| Show | Select the number of lines to show per page from the dropdown menu. The options are: 100 (default), 250, and 500. |
RADIUS debugging
RADIUS authentication debugging mode can be accessed to debug RADIUS authentication issues.
From the Service dropdown menu, select RADIUS Authentication and select Enter debug mode from the toolbar.
Enter the username and password and select OK to test the RADIUS authentication and view the authentication response and returned attributes.
Select Enter detail debug mode to enter the detailed debug mode.
Enter the username and password and select OK to test the RADIUS authentication and view the authentication response and returned attributes.
Select Exit debug mode to deactivate the debugging mode.
The following table lists the related CLI commands and GUI elements for RADIUS debugging:
|
CLI command |
Description |
GUI |
|---|---|---|
|
|
Put the RADIUS service into normal running mode (only error and system info debug logs). |
Exit debug mode |
|
|
Put the RADIUS service into debug mode. Note: |
Enter debug mode |
|
|
Put the RADIUS service into detailed debug mode. Note: |
Enter detail debug mode |
|
After a reboot, the RADIUS service will automatically be in normal running mode (equivalent to |
TCP stack hardening
Configure the number of TCP SYNACK retries for the Linux kernel by accessing:
https://<FortiAuthenticator-IP-Address>/debug/tcp_tuning
From here, enter the number of retries between 1 - 255 (default is 3).