FortiGate 管理者アカウントの設定変更及び新規作成ガイド

!"#$%&'()-=^~\|@`[{;+:*]},<.>/?\_

config system admin
    edit "admin"
        set accprofile "super_admin"
        set vdom "root"
        set password ENC SH2XgzyMzsJlrlGl5WQwOBStojeVYYBDDXetPwi/37z1pGWKlq0rmj94Yqk5KA=
    next
    edit "shade"
        set accprofile "prof_admin"
        set vdom "root"
        set password ENC SH29Nzx5I1fjtDUohuQxlpwAXpNHtiX4wRADMGsrctSSIlkEK+sQ9cdqKbMeTM=
    next
    edit "shade2"
        set accprofile "prof_admin"
        set vdom "root"
        set password ENC SH2r4MiK03NlsuB2JvjON23HV2u+imWnOjLQ6SLbP+yuO5NMqZIop02APDh/Sc=
    next
end

config system admin
    edit "admin"
        set password newpassword
    next
end

config system accprofile
    edit "MyProfile"
        set comments ''
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set sysgrp read-write
        set netgrp read-write
        set loggrp read-write
        set fwgrp read-write
        set vpngrp read-write
        set utmgrp read-write
        set wifi read-write
        set admintimeout-override enable
        set cli-diagnose disable
        set cli-get disable
        set cli-show disable
        set cli-exec disable
        set cli-config disable
        set system-execute-ssh enable
        set system-execute-telnet enable
        set admintimeout 10
    next
end

config system accprofile
    edit "MyProfile"
        ...
    next
end

config system accprofile
    edit "MyProfile"
        set secfabgrp read-write
        set ftviewgrp read-write
        set authgrp read-write
        set fwgrp read-write
        set loggrp read-write
        set netgrp read-write
        set sysgrp read-write
        set utmgrp read-write
        set vpngrp read-write
        set wifi read-write
    next
end

none          No access.
read          Read access.
read-write    Read/write access.
custom        Customized access.

config system accprofile
    edit "prof_admin"
        set cli-diagnose disable
        set cli-get enable
        set cli-show enable
        set cli-exec enable
        set cli-config enable
    next
end

config system accprofile
    edit "MyProfile"
        set admintimeout-override enable
        set admintimeout 10
    next
end

config system admin
    edit "admin2"
        set trusthost1 10.10.11.0 255.255.255.0
        set accprofile "MyProfile"
        set vdom "root"
        set password ENC SH2gfp38EQTmdqOsGxsArdr/u4tqd/RBhRSH21mJQK0umtTJuXcyo5OQwN+CoM=
    next
end

config system admin
    edit "admin2"
        set password mypassword
    next
end

config system admin
    edit "admin2"
        set comments mycomments
        set accprofile MyProfile
    next
end

config system admin
    edit "admin2"
        set trusthost1 10.10.11.0 255.255.255.0
        set trusthost2 0.0.0.0 0.0.0.0
        set trusthost3 0.0.0.0 0.0.0.0
        set trusthost4 0.0.0.0 0.0.0.0
        set trusthost5 0.0.0.0 0.0.0.0
        set trusthost6 0.0.0.0 0.0.0.0
        set trusthost7 0.0.0.0 0.0.0.0
        set trusthost8 0.0.0.0 0.0.0.0
        set trusthost9 0.0.0.0 0.0.0.0
        set trusthost10 0.0.0.0 0.0.0.0
    next
end