My most commonly used commands in the FortiGate cli.

Search the entire configuration for a word

show full-configuration | grep XXXX -f

Any term you search for using grep is highlighted with an arrow.

The -f "flag" adds the full syntax (location) of the term within the config.

Check arp entries

get system arp

View the ARP entries (MAC address / IP address) and source interfaces of each entry

CLI Packet capture

diagnose sniffer packet <interface> 'filters' #

packet capture output