Connecting to the CLI
Using its default settings, you can access the CLI in two ways:
• Locally — Connect your computer, terminal server, or console directly to the FortiRecorder appliance’s console port.
• Through the network — Connect your computer through any network attached to one of the FortiRecorder appliance’s network ports. To connect using an Secure Shell (SSH) , enable the network interface for Telnet or SSH administrative access. (By default, only SSH is enabled.) To connect using
Monitor > System Status > Console in the web UI, see
“Connecting to the web UI”.
Local access is required in some cases.
• If you are installing your FortiRecorder appliance for the first time and it is not yet configured to connect to your network, unless you reconfigure your computer’s network settings for a peer connection, you may only be able to connect to the CLI using a local console connection.
• Restoring the firmware utilizes a boot interrupt. Network access to the CLI is not available until after the boot process completes, and therefore local CLI access is the only viable option.
Secure Shell (SSH) provides both secure authentication and secure communications to the CLI. Supported SSH protocol versions, ciphers, and bit strengths include SSH version 2 with AES-128, 3DES, Blowfish, and SHA-1.
Table 8: Default settings for connecting to the CLI by SSH
Network Interface | port1 |
IP Address | 192.168.1.99 |
SSH Port Number | 22 |
Administrator Account | admin |
Password | |
| If you are not connecting for the first time, nor have you just reset the configuration to its default state or restored the firmware, administrative access settings may have already been configured. In this case, access the CLI using the IP address, administrative access protocol, administrator account and password already configured, instead of the default settings. You may need to use either the web UI or local console to enable network access to the CLI. See “SSH” and related settings. The following procedures describe connection using PuTTY software; steps may vary with other terminal emulators. |
Requirements
• a computer with an available serial communications (COM) port
• the RJ-45-to-DB-9 or null modem cable included in your FortiRecorder package
• terminal emulation software such as
PuTTY To connect to the CLI using a local console connection
1. Using the RJ-45-to-DB-9 or null modem cable, connect your computer’s serial communications (COM) port to the FortiRecorder appliance’s console port.
2. Verify that the FortiRecorder appliance is powered on.
3. On your management computer, start
PuTTY.
4. In the Category tree on the left, go to Connection > Serial and configure the following:
Serial line to connect to | COM1 (or, if your computer has multiple serial ports, the name of the connected serial port) |
Speed (baud) | 9600 |
Data bits | 8 |
Stop bits | 1 |
Parity | None |
Flow control | None |
5. In the Category tree on the left, go to Session (not the sub-node, Logging) and from Connection type, select Serial.
6. Click Open.
7. Press the Enter key to initiate a connection.
The login prompt appears.
8. Type admin then press Enter twice. (In its default state, there is no password for the admin account.)
The CLI displays the following text, followed by a command line prompt:
Welcome!
You can now enter commands. To continue by updating the firmware, see
“Updating the firmware”. Otherwise, to continue by setting an administrative password, see
“Changing the “admin” account password”.
Requirements
• a computer with an RJ-45 Ethernet port
• a crossover Ethernet cable (if connecting directly) or straight-through Ethernet cable (if connecting through a switch or router)
• a FortiRecorder network interface configured to accept SSH connections (In its default state, port1 accepts SSH. You may need to connect directly first in order to configure a static route so that, later, you can connect through routers. For details, see
“Adding a gateway”.)
• an SSH client, such as
PuTTY To connect to the CLI using an SSH connection
1. On your management computer, configure the Ethernet port with the static IP address 192.168.1.2 with a netmask of 255.255.255.0.
2. Using the Ethernet cable, connect your computer’s Ethernet port to the FortiRecorder appliance’s port1.
3. Verify that the FortiRecorder appliance is powered on.
4. On your management computer, start
PuTTY.
Initially, the Session category of settings is displayed.
5. In Host Name (or IP Address), type 192.168.1.99.
6. In Port, type 22.
7. From Connection type, select SSH.
8. Select Open.
The SSH client connects to the FortiRecorder appliance.
The SSH client may display a warning if this is the first time you are connecting to the FortiRecorder appliance and its SSH key is not yet recognized by your SSH client, or if you have previously connected to the FortiRecorder appliance but it used a different IP address or SSH key. If your management computer is directly connected to the FortiRecorder appliance with no network hosts between them, this is normal.
9. Click Yes to verify the fingerprint and accept the FortiRecorder appliance’s SSH key. You cannot log in until you accept the key.
The CLI displays a login prompt.
10. Type admin and press Enter. (In its default state, there is no password for this account.)
| If three incorrect login or password attempts occur in a row, you will be disconnected. Wait one minute, then reconnect to attempt the login again. |
The CLI displays a prompt, such as:
FortiRecorder #
You can now enter commands. To continue by updating the firmware, see
“Updating the firmware”. Otherwise, to continue by setting an administrative password, see
“Changing the “admin” account password”.