FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
atareco
Staff
Staff
Article Id 410232
Description This article describes how to format FortiGate firmware using a TFTP server in MacOS.
Scope FortiGate, MacOS
Solution

 

  1. Copy the FortiGate firmware image to TFTP directory:

cp /path/to/fortigate_formware.out /private/tftpboot/

 

Note: The default TFTP directory on macOS is /private/tftpboot, but any directory can be used.

 

  1. Set permissions to ensure the TFTP server can access the files:

 

chmod -R 777 /private/tftpboot/

 

Remember to change the permissions back later:

 

chmod -R 755 /private/tftpboot/

 

  1. Disable MacOS Firewall: Navigate to System Settings -> Network -> Firewall -> Turn Off (remember to enable it again later).

  1. Start TFTP server:

 

sudo launchctl start com.apple.tftpd

 

  1. Verify TFTP is running and listening on port 69 (udp 0 0 *.69):

 

sudo netstat -an | grep 69

 

  1. Connect an Ethernet cable from the macOS computer to the FortiGate WAN1 port (or another Ethernet port).

 

Assign a static IP address to the Ethernet interface: Go to System Settings -> Network -> Ethernet -> Details.

 

Set 'Configure IPv4' to Manual:

  • IP Address: 192.168.1.100
  • Subnet Mask: 255.255.255.0

 

  1. From the macOS Terminal, test connectivity to the TFTP server:

 

tftp 192.168.1.100
tftp> get fortigate_formware.out
tftp> quit

 

  1. Connect to the FortiGate console port using PuTTY on macOS:

Connect the Serial to the USB adapter to the PC.

Open a terminal and list available serial ports: 

 

ls /dev/*usb*

 

Find a device like /dev/tty.usbserial- (e.g., /dev/tty.usbserial-A9XBSOU6). Note this name: it is the serial port for PuTTY.

 

Open PuTTY and use the following settings:

 

putty.png

 

  1. Follow the instructions from step 9 onwards in Technical Tip: Formatting and loading FortiGate firmware image using TFTP.