Technical Tip: Upgrading FortiAP Firmware

[FortiKoala]

Description

This article describes how to upgrade FortiAP firmware.

Updating FortiAP firmware from the FortiGate or FortiAP, update the FortiAP firmware using either the web-based manager or the CLI options.

Note: There is no upgrade path for FortiAPs, and they can be directly upgraded to the required version.

Scope

FortiAP.

Solution

Method 1: To update FortiAP firmware: FortiGate GUI:

1. Go to WiFi Controller & Switch Controller -> Managed FortiAPs.
2. Select the FortiAP from the list and edit it.
3. In FortiAP OS Version, select 'Upgrade'.
4. Select Browse and locate the firmware upgrade file.
5. Select 'OK'.
6. When the upgrade process completes, select 'OK'.
   
   

The FortiAP restarts.

To upgrade multiple FortiAPs at a time, go to Managed FortiAPs on the FortiGate GUI, select multiple APs at a time, 'Right-click', and select  Upgrade.

 

Method 2: To update FortiAP firmware: FortiGate CLI:

1. Upload the FortiAP image to the FortiGate.

For example, the Firmware file is 'FAP_22A_v4.3.0_b0212_fortinet.out' and the server IP address is 192.168.0.100.

execute wireless-controller upload-wtp-image tftp FAP_22A_v4.3.0_b0212_fortinet.out 192.168.0.100

If the server is FTP, change TFTP to FTP, and if necessary, add the user name and password at the end of the command.

2. Verify that the image is uploaded:

execute wireless-controller list-wtp-image

3. Upgrade the FortiAPs:

exec wireless-controller reset-wtp all

To upgrade only one FortiAP, enter its serial number instead of all.

Method 3: To update FortiAP firmware: FortiAP CLI:

The firmware can be loaded by using the FortiAP CLI command.

1. Place the FortiAP firmware image on a TFTP server.
2. Configure network configuration (IP address and default gateway if needed) of the FortiAP. Ensure the connection with the TFTP server.
3. Type the following command:

FortiOS # restore <filename> <TFTP server address>

Method 4: To update FortiAP firmware: FortiAP GUI:

For information, when FortiManager upgrade FortiAP, the image will not directly push to the FortiAP. The image will be sent to the controller which is FortiGate.

Hence the structure is as below:

FortiManager -> (Push Image) -> FortiGate. FortiAP get the image from FortiGate.

execute wireless-controller list-wtp-image  <----- This command lists all the available firmware on FortiGate.
execute wireless-controller delete-wtp-image image-name  <----- This command will delete the image.
exe wireless-controller delete-wtp-image all  <----– This command will remove all the images available for FortiAP on FortiGate.

While upgrading the FortiAP, run the debug from FortiManager:

diagnose fwmanager fwm-log dump  <----- To check if there any error occurs.

This method is available if the FortiAP model supports HTTPS administrative access: Technical Tip: How to install FortiAP firmware.