Search Our Database

Overview

This article provides step-by-step instructions on how to re-enable a disabled VPN user account using the Command Line Interface (CLI) on a Fortinet FortiGate firewall. This is useful for administrators who prefer using SSH or the Web GUI’s CLI console.

Prerequisites

Before proceeding, ensure the following:

• Administrator access to FortiGate via SSH or Web GUI CLI

• The VPN user is a local account that was previously disabled

• The exact username of the account to be re-enabled

• An active SSH or Web GUI session

• A configuration backup (recommended)

Step-by-Step Instructions (CLI)

1. Access the CLI

   • SSH into the FortiGate firewall or use the CLI Console via Web GUI.

2. Run the Configuration Commands

config user local
edit <username>
set status enable
next
end

3. Verify the Configuration

• • Run the following to confirm the user is enabled:

show full-configuration user local | grep -A 3 '<username>'

Conclusion

You have now successfully re-enabled a disabled VPN user account using the FortiGate CLI. The user will regain VPN access in accordance with the firewall’s configured access control rules.

If you need additional assistance, please contact us at support@ipserverone.com.