Skip to main content
Rathan_FTNT
Staff
Rathan_FTNT
Staff
August 19, 2020

Technical Tip: Installing firmware from system reboot

  • August 19, 2020
  • 0 replies
  • 33201 views

Description

 

This article describes how to install firmware from a system reboot. In the event that the firmware upgrade does not load properly and the FortiGate unit will not boot or continuously reboots, it is better to perform a fresh install of the firmware from a reboot using the CLI.

Scope


FortiGate.


Solution

This procedure installs a firmware image and resets the FortiGate unit to factory default settings. Use this procedure to upgrade to a new firmware version, revert to an older firmware version, or re-install the current firmware.

To use this procedure, connect to the CLI using the FortiGate console port and a RJ-45 to DB-9, or null modem cable.

Install a TFTP server to connect to from the FortiGate internal interface.
The TFTP server is on the same subnet as the internal interface.

Before beginning this procedure, make sure to have a FortiGate configuration backup. See Configuration backups for details.

If a previous FortiOS version is used, it will not be possible to restore the previous configuration from the backup configuration file.

Installing firmware replaces the current antivirus and attack definitions, along with the definitions included with the firmware release in installation. After new firmware is installed, make sure that antivirus and attack definitions are up to date.

To format boot device and install the firmware, follow the steps below:

  1. Connect to the CLI using the RJ-45 to DB-9 or null modem cable.

  2. Reboot the FortiGate and then press any key when below message will be shown:


Please wait for OS to boot, or press any key to display the configuration menu.


  1. After entering the configuration menu, press 'F' to format the device:


[C]: Configure TFTP parameters.
[R]: Review TFTP parameters.
[T]: Initiate TFTP firmware transfer.
[F]: Format boot device.
[I]: System information.
[B]: Boot with backup firmware and set as default.
[Q]: Quit menu and continue to boot.
[H]: Display this list of options.
Enter C,R,T,F,I,B,Q,or H:
It will erase data in boot device. Continue? [yes/no]:yes
Formatting..........done
Done.


  1. Ensure that the TFTP server is running.

  2. Copy the new firmware image file to the root directory of the TFTP server.

  3. Ensure that the FortiGate unit can connect to the TFTP server using the execute ping command.

  4. Restart the FortiGate unit with the following command (the response is also shown below):


execute reboot
This operation will reboot the system!
Do you want to continue? (y/n)


  1. Press 'y'. As the FortiGate unit starts, a series of system startup message appear.

  2. When the following messages appear, press any key before three seconds elapse:


Press any key to display configuration menu..........
Immediately press any key to interrupt the system startup.


The FortiGate will reboot if no button is pressed. If this happens, logging in and repeating the execute reboot command will then be necessary. If the startup process is interrupted, the following messages appear:

[G]: Get firmware image from TFTP server.
[F]: Format boot device.
[B]: Boot with backup firmware and set as default
[C]: Configuration and information
[Q]: Quit menu and continue to boot with default firmware.
[H]: Display this list of options.
Enter G, F, Q, or H:

 

  1. Type 'G' to get the new firmware image from the TFTP server. The following message will appear:


Enter TFTP server address [192.168.1.168]:

 

  1. Type the address of the TFTP server, then press Enter. The following message will appear:


Enter Local Address [192.168.1.188]:

 

  1. Type the IP address of the FortiGate unit to connect to the TFTP server. The IP address has to be on the same network as the TFTP server. Make sure not to enter the IP address of another unit on this network.

 

  1. The following message will appear:


Enter File Name [image.out]:

 

  1. Enter the firmware image file name and then press Enter. The TFTP server will upload the firmware image file to the FortiGate and the following message will appear:


Save as Default firmware/Backup firmware/Run image without saving: [D/B/R]

 

  1. Press 'D'. The FortiGate will install the new firmware image and restart. The installation takes a few minutes to complete.


The IP address has to be on the same network as the TFTP server. Make sure not to enter the IP address of another unit on this network.

Related documents:

    Terms & ConditionsAccessibility statement