FortiGate FortiOS CLI practice lab
This is a browser FortiOS 7.4 style CLI. The banner on the terminal is FortiGate-VM64 FortiOS v7.4.4. It is not a FortiGate VM and it does not connect to a real Fortinet device. The hostname label starts as FGT-VM. FortiOS is a tree: config opens a table, edit opens one object, set changes a field, next stores that object, and end climbs back. The prompt changes as you go down. Type ? for help at the current level.
Operational commands that this shell actually lists are get system status, get system performance status, get system interface, get hardware status, show full-configuration, show firewall policy, show router static, execute ping, execute traceroute, and diagnose sys top. Config examples on the page rename the hostname, set an IP on port3, add firewall policy 2 from port1 to port2 with action deny, and add a static route.
Guest mode needs no VM. This lab does not configure IPsec or SSL VPN. There is no phase1, phase2, or vpn tunnel command in this shell. Use it for the config tree, firewall policy, interfaces, and static routes. Sign-in only saves the workspace between devices.
Common questions
Which FortiOS commands does this lab run?
Status, interface, hardware, full configuration, firewall policy, static routes, ping, traceroute, and a top-style diagnose view, plus the config tree examples in the side panel.
Can I add a firewall policy?
Yes. The example edits policy 2, sets port1 to port2, and sets action deny, then next and end.
Can I configure a VPN here?
No. This shell does not include IPsec or SSL VPN. Policy, interface IP, and static route are the config tasks it accepts.
Why does the prompt change?
config and edit move you into a sub-shell. end returns toward the top, the same way FortiOS CLI works.
FortiGate FortiOS CLI
FortiOS 7.4