PermitANY

Fortinet Config Generator

9 templates for FortiOS. Fill the form, copy the config. No account required.

Base / Day-0

Config · Networking

Day-zero configuration for FortiGate firewalls: hostname, admin, NTP, DNS, management interface, and FortiGuard settings via FortiOS CLI.

day-zerontpdns

BGP

Config · Networking

BGP routing configuration for FortiGate: eBGP and iBGP peers, route-maps, prefix lists, redistribution, and community settings via FortiOS CLI.

ebgpibgpdual-isp

Firewall Policy

Config · Network Security

FortiGate security policy configuration with address objects, service objects, UTM profiles, and IPv4 firewall policies.

firewall-policyaddress-objectaddress-group

High Availability

Config · Networking

FortiGate FGCP (FortiGate Clustering Protocol) HA configuration for Active/Passive or Active/Active mode with session synchronization, heartbeat interfaces, and failover settings.

fgcpha-clusteractive-passive

Hardening

Config · Cybersecurity

CIS Benchmark-aligned hardening for FortiGate firewalls: admin access restrictions, TLS policy, password policy, unused service disablement, and audit logging.

cis-benchmarktrusted-hostspassword-policy

Interfaces

Config · Networking

Physical interfaces, VLAN sub-interfaces, loopbacks, and aggregate (LACP) interface configuration for FortiGate firewalls.

interfacevlan-subinterfacedot1q

VPN IPSec

Config · Network Security

IKEv2 site-to-site IPSec VPN for FortiGate: phase1/phase2 proposals, tunnel interface, static route, and firewall policy for VPN traffic.

ipsecikev2phase1-interface

NAT

Config · Network Security

Central SNAT (source NAT pool), VIP (virtual IP / DNAT port-forwarding), and NAT policies for FortiGate firewalls.

central-snatvipdestination-nat

SNMP + Syslog

Config · Networking

SNMPv3 with host restriction, per-interface SNMP access control, syslog to multiple collectors with severity filtering, and NTP - configured per VDOM where VDOMs are enabled.

snmpv3allowaccesssyslogd