FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
haldahan
Staff
Staff
Article Id 424955
Description

This article describes a procedure to upgrade managed FortiSwitches via the FortiGate with the same model in batches with the CLI.

Scope FortiGate, FortiSwitch, FortiLink.
Solution
  1. Create a FortiSwitch group on the FortiGate.

 

config switch-controller switch-group

    edit "<group-name>"

        set description "Optional description"

        set member "<switch_id_1>" "<switch_id_2>"

    next

end

 

switch-group.jpg 

  1. Use the following command to upload the FortiSwitch firmware image to the FortiGate's local storage. 
    1. This will require an FTP/TFTP server to be set up to upload the FortiSwitch image.
    2. FortiSwitch firmware image files are available for download on support.fortinet.com
    3. Note down the image file name in the output 'Image Saving [filename].swtp ...'.

 

execute switch-controller switch-software upload ftp/tftp <image-name> <server-ip>

 

image_upload.jpg

 

  1. Use the following command to stage a firmware image on FortiSwitch units:

 

execute switch-controller switch-software stage switch-group <switch-group ID> <filename>

 

image_stage.jpg

 

The filename can be retrieved using the command below:

execute switch-controller switch-software list-available

 

list_image.jpg

 

  1. Check the status of image staging using the command below:

 

execute switch-controller get-upgrade-status

 

upgrade-status-1.jpg


upgrade-status-2.jpg

 

  1. To update a designated FortiSwitch group, execute the command below:

 

execute switch-controller switch-action restart swtp switch-group <switch-group ID>

 switch-restart.jpg

 

Related document:

Viewing and upgrading the FortiSwitch firmware version