From 52526d2381553bd028b933c57bf29aae8928ee7c Mon Sep 17 00:00:00 2001 From: Yuri Slobodyanyuk Date: Thu, 18 Feb 2021 11:53:50 +0000 Subject: [PATCH] ongoing additions, changes, and fixes --- Fortigate-debug-diagnose-complete-cheat-sheet.adoc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Fortigate-debug-diagnose-complete-cheat-sheet.adoc b/Fortigate-debug-diagnose-complete-cheat-sheet.adoc index 029c1a9..0d24a7f 100644 --- a/Fortigate-debug-diagnose-complete-cheat-sheet.adoc +++ b/Fortigate-debug-diagnose-complete-cheat-sheet.adoc @@ -470,6 +470,10 @@ a|View the kernel routing table (FIB). This is the list of resolved routes actua |Clear traffic statistics on the interface, this resets statistics of the SD-WAN traffic passing over this interface. Needed, if, for example, you changed SD-WAN rules, but not sure if it's already active. E.g. `diag netlink interface clear port1`. +|*diagnose firewall proute list* +|List ALL Policy Based Routes (PBR). SD-WAN in Fortigate, after all, is implemented as a variation of PBR. This command lists manual (classic) PBR rules, along with SD-WAN created via SD-WAN rules. *Important*: Manually created PBR rules (via `Network -> Policy Routes` or on CLI `config route policy` always have preference over the SD-WAN rules, and this command will show them higher up. + +