Download FortiGate configuration using SCP - 飞塔技术

姓名：大萝卜职业：听人说，技术支持是IT业最鸡肋的职业，于是我便开始郁闷起来! 个性签名: 我以为我们同属于/30，Ping出Timed out才明白处于不同的Vlan。我尝试着用爱做为Route，并用Traceroute来验证，可是Netstat的Syn_received结果让我无比伤心。于是我选择了deny any和deny ip any any,但是我心里一直期待着Vpn那天的到来,请将我放在你的Acl之内。 Mailto:bxz1981#gmail.com

You can use secure copy (SCP) protocol to download the configuration file from FortiGate units running FortiOS 3.0 MR3 or later. This article describes how to enable SCP download on the FortiGate unit and use typical SCP client programs.

Enable SCP

Go to System > Admin > Settings.
Select Enable SCP.
Select Apply.

Enable SSH access on the interface

SCP uses SSH protocol to provide secure file transfer.

Go to System > Network > Interface.
Select the Edit icon for the interface you use for administrative access.
In the Administrative Access section, select the SSH check box.
Select OK.

The FortiGate unit configuration file name is sys_config. Use the following syntax to download the file:

Linux

scp admin@<FortiGate_IP>:sys_config <location>

Windows

pscp admin@<FortiGate_IP>:sys_config <location> These examples show how to download the configuration file from a FortiGate unit at IP address 172.20.120.171, using Linux and Windows SCP clients.
Linux client example To download the configuration file to a local directory called ~/config, enter the following command: scp admin@172.20.120.171:sys_config ~/config Enter the admin password when prompted. Windows client example To download the configuration file to a local directory called c:\config, enter the following command in a Command Prompt window: pscp admin@172.20.120.171:sys_config c:\config Enter the admin password when prompted.