Fortinet white logo
Fortinet white logo

CLI Reference

config ztna reverse-connector

config ztna reverse-connector

Configure ZTNA Reverse-Connector.

config ztna reverse-connector
    Description: Configure ZTNA Reverse-Connector.
    edit <name>
        set address {string}
        set certificate {string}
        set default-incoming-vip {string}
        set health-check-interval {integer}
        set interface {string}
        set interface-select-method [auto|sdwan|...]
        set port {integer}
        set source-ip {ipv4-address}
        set source-ip-interface {string}
        set ssl-max-version [tls-1.1|tls-1.2|...]
        set ssl-min-version [tls-1.1|tls-1.2|...]
        set status [enable|disable]
        set trusted-server-ca {string}
        set vrf-select {integer}
    next
end

config ztna reverse-connector

Parameter

Description

Type

Size

Default

address

Connector service edge adress(IP or FQDN).

string

Maximum length: 255

certificate

The name of the certificate to use for SSL handshake.

string

Maximum length: 35

default-incoming-vip *

Default Incoming Virtual IP name.

string

Maximum length: 79

health-check-interval

Health check interval in seconds (0 - 600, default = 60, 0 = disable).

integer

Minimum value: 0 Maximum value: 600

60

interface *

Specify outgoing interface to reach server.

string

Maximum length: 15

interface-select-method *

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

name

Reverse-Connector name

string

Maximum length: 35

port

Port number that traffic uses to connect to connector service edge(1 - 65535;).

integer

Minimum value: 1 Maximum value: 65535 **

0

source-ip *

FortiGate IPv4 address to be used for ZTNA reverse-connector connection.

ipv4-address

Not Specified

0.0.0.0

source-ip-interface *

Source interface to be used for ZTNA reverse-connector connection.

string

Maximum length: 15

ssl-max-version

Highest TLS version acceptable from a server.

option

-

tls-1.3

Option

Description

tls-1.1

TLS 1.1.

tls-1.2

TLS 1.2.

tls-1.3

TLS 1.3.

ssl-min-version *

Lowest SSL/TLS version acceptable from a server.

option

-

tls-1.2

Option

Description

tls-1.1

TLS 1.1.

tls-1.2

TLS 1.2.

tls-1.3

TLS 1.3.

status

Reverse-Connector status.

option

-

enable

Option

Description

enable

Enable the reverse-connector.

disable

Disable the reverse-connector.

trusted-server-ca

Trusted Server CA certificate used by SSL connection.

string

Maximum length: 79

vrf-select *

VRF ID used for connection to server.

integer

Minimum value: 0 Maximum value: 511

0

* This parameter may not exist in some models.

** Values may differ between models.

config ztna reverse-connector

config ztna reverse-connector

Configure ZTNA Reverse-Connector.

config ztna reverse-connector
    Description: Configure ZTNA Reverse-Connector.
    edit <name>
        set address {string}
        set certificate {string}
        set default-incoming-vip {string}
        set health-check-interval {integer}
        set interface {string}
        set interface-select-method [auto|sdwan|...]
        set port {integer}
        set source-ip {ipv4-address}
        set source-ip-interface {string}
        set ssl-max-version [tls-1.1|tls-1.2|...]
        set ssl-min-version [tls-1.1|tls-1.2|...]
        set status [enable|disable]
        set trusted-server-ca {string}
        set vrf-select {integer}
    next
end

config ztna reverse-connector

Parameter

Description

Type

Size

Default

address

Connector service edge adress(IP or FQDN).

string

Maximum length: 255

certificate

The name of the certificate to use for SSL handshake.

string

Maximum length: 35

default-incoming-vip *

Default Incoming Virtual IP name.

string

Maximum length: 79

health-check-interval

Health check interval in seconds (0 - 600, default = 60, 0 = disable).

integer

Minimum value: 0 Maximum value: 600

60

interface *

Specify outgoing interface to reach server.

string

Maximum length: 15

interface-select-method *

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

name

Reverse-Connector name

string

Maximum length: 35

port

Port number that traffic uses to connect to connector service edge(1 - 65535;).

integer

Minimum value: 1 Maximum value: 65535 **

0

source-ip *

FortiGate IPv4 address to be used for ZTNA reverse-connector connection.

ipv4-address

Not Specified

0.0.0.0

source-ip-interface *

Source interface to be used for ZTNA reverse-connector connection.

string

Maximum length: 15

ssl-max-version

Highest TLS version acceptable from a server.

option

-

tls-1.3

Option

Description

tls-1.1

TLS 1.1.

tls-1.2

TLS 1.2.

tls-1.3

TLS 1.3.

ssl-min-version *

Lowest SSL/TLS version acceptable from a server.

option

-

tls-1.2

Option

Description

tls-1.1

TLS 1.1.

tls-1.2

TLS 1.2.

tls-1.3

TLS 1.3.

status

Reverse-Connector status.

option

-

enable

Option

Description

enable

Enable the reverse-connector.

disable

Disable the reverse-connector.

trusted-server-ca

Trusted Server CA certificate used by SSL connection.

string

Maximum length: 79

vrf-select *

VRF ID used for connection to server.

integer

Minimum value: 0 Maximum value: 511

0

* This parameter may not exist in some models.

** Values may differ between models.