Technical Note : How to install FortiAP firmware

[Kenichi_Terashita_FT]

Description

This article describes a number of different methods to install FortiAP firmware when it needs to be reloaded, upgraded or downgraded.  The following methods can be used:

• Through TFTP server during boot sequence
• Through FortiGate Wireless Controller using FortiGate CLI
• Direct from FortiAP CLI
• Through FortiGate Wireless Controller using GUI

Solution

Through TFTP server during boot sequence

Unplug the power cable or its POE cable and plug in or run 'reboot' command to restart boot sequence. As same as other Fortinet products, FortiAP firmware can be reloaded through TFTP. The boot sequence and steps to load the firmware as shown below. At the end of the load the FortiAP configuration is reset to factory default values.

FortiAP # reboot
The system is going down NOW !!
The system is going down NOW !!
Sending SIGTERM to all processes.
Sending SIGTERM to all processes.
Please stand by while rebooting the system.
Restarting system.
FortiAP-220B (Aug 25 2010 - 11:26:25)
Ver:04000008
Serial number: FAP22B3U1000****
DRAM: b8050000: 0xc0140180
64 MB
id read 0x100000ff
flash size 16MB, sector count = 256
Flash: 16 MB
Using default environment
In: serial
Out: serial
Err: serial
Net: ag7100_enet_initialize...
ATHRF1E:
No phy found for unit 0
eth0: 00:09:0f:**:**:**
eth0 up
ATHRF1E: Port 1, Negotiation timeout
ATHRF1E: unit 1 phy addr 0 ATHRF1E: reg0 3100
eth1: 00:09:0f:**:**:**
eth1 up
eth0, eth1
Hit any key to stop autoboot: 4 <----- Hit any key
[G]: Get OS image from TFTP server.
[Q]: Quit menu and continue to boot with default OS.
[H]: Display this list of options.
Enter G,Q,or H: <----- Input 'G' key
Please connect TFTP server to Ethernet port 'eth1'.
Enter TFTP server address [192.168.1.1]: <----- Input TFTP server address
Enter local address [192.168.1.2]: <----- Input local address
Enter firmware image file name [image.out]: <----- Input firmware file name

Note: Currently the FortiAP BIOS (04000008) does not link up with a 1000Mbps link. If the unit is connecting to a 1000Mbps switch, it would fail the connection with the TFTP server. In this case it should be switched to 10/100Mbps switch or alternatively contact Fortinet Technical Support if assistance is required.



Through FortiGate Wireless Controller using FortiGate CLI

If you are already establishing FortiAP and FortiGate Wireless Controller, you can push the firmware from FortiGate.

1. Place the FortiAP firmware image on a TFTP server.
2. In FortiGate CLI, type the command to obtain the image onto the FortiGate.

FortiGate # execute wireless-controller upload-wtp-image tftp <filename> <TFTP server address>

3. Upgrade the FortiAP by using the following command. A specific FortiAP or all FortiAPs can be selected. The FortiAP console will show reloading firmware sequence messages.

FortiGate # execute wireless-controller reset-wtp <S/N | all>

Direct from FortiAP CLI

The firmware can be loaded by using the FortiAP CLI command.

1. Place the FortiAP firmware image on a TFTP server.
2. Configure network configuration (IP address and default gateway if needed) of the FortiAP. Ensure the connection with TFTP server.
3. Type the following command

FortiOS # restore <filename> <TFTP server address>

Through FortiGate Wireless Controller using GUI

1. Place the FortiAP firmware image on a local PC.
2. Login to the FortiGate GUI and go to WiFi Controller > Managed Access Points > Managed FortiAP.

3. Select the FortiAP unit from the list and edit it.
4. In FortiAP OS Version, select [Upgrade].
5. Select Browse and locate the firmware upgrade file.
6. Select OK.
7. When the upgrade process completes, select OK. The FortiAP unit restarts.