Fortinet FortiGate-5144C Manual page 66

Compatible with fortigate-5000 series
Table of Contents

Advertisement

Shelf Manager CLI
To configure the shelf manager LAN alert destination
1. Log into the shelf manager CLI.
2. Set alert type for channel 1 and destination number 2. This command sets the alert type to 0 0 0 which means an
unacknowledged PET trap, with 0 timeout and 0 retry count:
# clia setlanconfig 1 destination_type 2 0 0 0
3. Set the destination IP and MAC address, which is the IP and MAC address of the SNMP server.
# clia setlanconfig 1 destination_address 2 0 172.20.120.11 00:1A:A0:2F:BC:C6
To set the community name used in PET traps
1. Use the following command to set the community name used in PET traps. This can be any community name, the
default is public.
# clia setlanconfig 1 16 "<community_name> "
2. For example, use the following command to set the community name to MyCommunity
# clia setlanconfig 1 16 MyCommunity
3. You can enter the following command to confirm that the community name has been changed:
# clia getlanconfig 1
Authentication Type Support: 0x17 ( None MD2 MD5 Straight Password/Key )
Authentication Type Enables:
.
.
.
Backup Gateway MAC Address: N/
Community String: "MyCommunity"
Number of Destinations: 16
.
.
.
To configure the PEF event filter table
1. Enable PEF and enter a PEF control flag:
# clia setpefconfig control 1
This command sets an 8-bit value, entered in hexadecimal and treated as a bit mask, that represents control flags
for PEF. The control value 1 enables the PEF.
2. Enable alert actions:
# clia setpefconfig action_control 1
3. An 8-bit value entered in hexadecimal and treated as a bit mask. Setting action_control to 1 enables alert actions.
4. Delay PEF and delay alerts for 60 seconds after the system powers up:
# clia setpefconfig startup_delay 60
# clia setpefconfig alert_startup_delay 60
5. Add event filter entries. The syntax of the command is:
# clia setpefconfig event_filter <entry_number> <flter_configuration> <filter_
FortiGate-5144C 6.2.3 Chassis Guide
The SNMP server can be on a different subnet. If it is on a different subnet, the MAC
address in the command should be the MAC address of the gateway that the shelf
manager connects through to reach the SNMP server.
Fortinet Technologies Inc.
66

Advertisement

Table of Contents
loading

This manual is also suitable for:

Fortigate-5000 seriesFortigate-5060

Table of Contents