system : modem
 
modem
Use this command to configure FortiGate models with dedicated modem interfaces or to configure a serial modem interface connected using a serial converter to the USB port.
This command is only available in NAT/Route mode. When Transparent mode is enabled, all modem related pages are hidden in the web-based manager.
Syntax
config system modem
set account-relation {equal | fallback}
set altmode {enable | disable}
set authtype1 {pap chap mschap mschapv2}
set authtype2 {pap chap mschap mschapv2}
set authtype3 {pap chap mschap mschapv2}
set auto-dial {enable | disable}
set connect_timeout <seconds>
set dial-on-demand {enable | disable}
set distance <distance>
set dont‑send‑CR1 {enable | disable}
set dont‑send‑CR2{enable | disable}
set dont‑send‑CR3 {enable | disable}
set extra-init1, extra-init2, extra-init3 <init_str>
set holddown-timer <seconds>
set idle-timer <minutes>
set interface <name>
set lockdown-lac <lac_str>
set mode {redudant | standalone}
set modem‑dev1, modem‑dev2, modem‑dev3 {internal | pcmcia-wireless}
set network-init <init_str>
set passwd1, passwd2, passwd3 <password_str>
set peer_modem1 {actiontec | ascendTNT | generic}
set peer_modem2 {actiontec | ascendTNT | generic}
set peer_modem3 {actiontec | ascendTNT | generic}
set phone1 <phone-number>
set phone2 <phone-number>
set phone3 <phone-number>
set pin-init <init_str>
set ppp-echo-request1 {disable | enable}
set ppp-echo-request2 {disable | enable}
set ppp-echo-request3 {enable | disable}
set priority <integer> {enable | disable}
set redial <tries_integer>
set status {enable | disable}
set username1 <name_str>
set username2 <name_str>
set username3 <name_str>
set wireless-port <port_int>
end
 
Variable
Description
Default
account-relation {equal | fallback}
Set the account relationship as either equal or fallback.
equal — Accounts are equal and keep using the first successful account.
fallback — The first account takes priority, fall back to the first account if possible
equal
altmode {enable | disable}
Enable for installations using PPP in China.
enable
authtype1 {pap chap mschap mschapv2}
authtype2 {pap chap mschap mschapv2}
authtype3 {pap chap mschap mschapv2}
Enter the authentication methods to use for 3G modems as one of: PAP, CHAP, MS-CHAP, or MS-CHAPv2.
pap chap mschap mschapv2
auto-dial {enable | disable}
Enable to dial the modem automatically if the connection is lost or the FortiGate unit is restarted.
This is available only when dial-on-demand is set to disabled, and mode is set to standalone.
disable
connect_timeout <seconds>
Set the connection completion timeout (30 - 255 seconds).
90
dial-on-demand {enable | disable}
Enable to dial the modem when packets are routed to the modem interface. The modem disconnects after the idle‑timer period.
This is available only if auto-dial is set to disabled, and mode is set to standalone.
disable
distance <distance>
Enter the administrative distance (1-255) to use for the default route that is automatically added when the modem connects and obtains an IP address. A lower distance indicates a more preferred route. For more information, see router static “distance <distance>”.
This field is useful for configuring redundant routes in which the modem interface acts as a backup to another interface.
1
dont‑send‑CR1 {enable | disable}
dont‑send‑CR2{enable | disable}
dont‑send‑CR3 {enable | disable}
Optionally, suppress sending of <CR> character during logon to PPP services. This is required by some service providers.
disable
extra-init1, extra-init2, extra-init3 <init_str>
Enter up to three extra initialization strings to send to the modem.
null
holddown-timer <seconds>
Used only when the modem is configured as a backup for an interface. Set the time (1‑60 seconds) that the FortiGate unit waits before switching from the modem interface to the primary interface, after the primary interface has been restored.
This is available only when mode is set to redundant.
60
idle-timer <minutes>
Set the number of minutes the modem connection can be idle before it is disconnected.
This is available only if mode is set to standalone.
5
interface <name>
Enter an interface name to associate the modem interface with the ethernet interface that you want to either back up (backup configuration) or replace (standalone configuration).
No default.
lockdown-lac <lac_str>
Optionally, allow connection only to the specified location area code (LAC).
null
mode {redudant | standalone}
Enter the required mode:
redundant — The modem interface automatically takes over from a selected ethernet interface when that ethernet interface is unavailable.
standalone — The modem interface is the connection from the FortiGate unit to the Internet.
standalone
modem‑dev1, modem‑dev2, modem‑dev3 {internal | pcmcia-wireless}
modem-dev1/2/3 refers to one of up to 3 configurable modems on your FortiGate unit. Each device can be either internal or pcmcia-wireless on models that support PCMCIA. The default is internal.
For 3G PCMCIA modems, select the pcmcia-wireless option.
internal
network-init <init_str>
Get or set current network operator. <init_str> is equivalent to the AT command AT+COPS=<mode>,[<format>,<oper>[,<AcT>]]
where <mode>:
0 — automatic selection, other parameters ignored
1 — manual selection, as specified
0
passwd1, passwd2, passwd3 <password_str>
Enter the password used to access the specified dialup account.
No default.
peer_modem1 {actiontec | ascendTNT | generic}
If the modem at phone1 is Actiontec or AscendTNT, select that type, otherwise leave setting as generic.
generic
peer_modem2 {actiontec | ascendTNT | generic}
If the modem at phone2 is Actiontec or AscendTNT, select that type, otherwise leave setting as generic.
generic
peer_modem3 {actiontec | ascendTNT | generic}
If the modem at phone3 is Actiontec or AscendTNT, select that type, otherwise leave setting as generic.
generic
phone1 <phone-number>
phone2 <phone-number>
phone3 <phone-number>
Enter the phone number required to connect to the dialup account. Do not add spaces to the phone number. Make sure to include standard special characters for pauses, country codes, and other functions as required by your modem to connect to your dialup account.
No default.
pin-init <init_str>
Enter an AT command string to set the PIN.
Use this command only after a reboot or major settings change.
null
ppp-echo-request1 {disable | enable}
Disable ppp-echo-request1 if the PPP echo request feature is not supported by your wireless ISP. This applies to the 1st modem, if connected.
PPP echo request is used to detect low level link down for modems.
enable
ppp-echo-request2 {disable | enable}
Disable ppp-echo-request2 if the PPP echo request feature is not supported by your wireless ISP. This applies to a 2nd modem, if connected.
PPP echo request is used to detect low level link down for modems.
enable
ppp-echo-request3 {enable | disable}
Disable ppp-echo-request3 if the PPP echo request feature is not supported by your wireless ISP. This applies to a 3rd modem, if connected.
PPP echo request is used to detect low level link down for modems.
enable
priority <integer> {enable | disable}
Enter the priority of learned routes on this interface.
Valid priorities are from 0 to 4294967295.
For more information on route priorities, see router static.
0
redial <tries_integer>
Set the maximum number of times (1-10) that the FortiGate unit dials the ISP to restore an active connection on the modem interface. Select none to allow the modem to redial without a limit.
No default.
status {enable | disable}
Enable or disable modem support. This is equivalent to bringing an interface up or down.
disable
username1 <name_str>
username2 <name_str>
username3 <name_str>
Enter the user name used to access the specified dialup account.
No default.
wireless-port <port_int>
Enter TTY Port for 3G modems. Enter 0 to use default port.
0