This article describes how to resolve an issue experienced on a 7000F series when the CLI on the FIM shows a mismatch message 'Error: FIM1 and FIM2 boardtype mismatch detected!' during the boot process:
----------------------------------
Reading boot image 34xxxxxx bytes.
Initializing firewall...
System is starting...
boardtype_to_str 149 boardtype:4 does not have str name
boardtype_to_str 149 boardtype:4 does not have str name
Error: FIM1 and FIM2 boardtype mismatch detected!
FIM1 is UNKNOWN BOARDTYPEFIM7921F but FIM2 is UNKNOWN BOARDTYPEFIM7921F
To continue, please make sure both FIMs are the same boardtype.
----------------------------------
As a consequence the login prompt is not displayed and it is not possible to input any login credentials from CLI.
The problem is due to the firmware image and a firmware upgrade on the FIM module, performed from the boot menu, can resolve it.
The FPMs should be still accessible from console and after login with admin credentials, the command 'get system status' from FPM should show the firmware version installed on FIM.
FortiGate-7000F series.
The file images that can be installed to resolve the issue are:
To resolve the problem, the following are needed:
Following this procedure, a firmware image will be downloaded from an external TFTP server (i.e. laptop) into a TFTP folder inside the FIM module.
Once the new firmware image is stored in the FIM01, it can be used to push the image to the primary FIM flash or any other 7000F series FIM/FPM module.
To connect the FortiGate to the SMM console, follow the instructions on the following KB article:
Technical Tip: How to access the console port on the management
Once the laptop is connected to the FortiGate SMM module, Management IP and laptop IP are in the same subnet (or can reach each other), the TFTP software is running correctly and incoming TFTP requests are allowed, the procedure is the following:
During the procedure, if any firmware validating errors appear and a new firmware cannot be installed, it might be necessary to temporarily lower the firmware level to '0' and then restore it on the specific slot after the new firmware is in place via following KB article:
Troubleshooting Tip: Downgrade of FortiOS fails due to BIOS check
If after installing new firmware on the FIM module, errors similar to the below are shown in the FIM console, format the log disk ('execute formatlogdisk') and rebuild the RAID ('execute disk raid enable'), the reboot will be required and errors will disappear:
-----------------------------------------------------------
EXT4-fs error (device nvme0n1p1): ext4_lookup:1576: inode #2: comm smit: deleted inode referenced: 374xxxxx
EXT4-fs error (device nvme0n1p1): ext4_lookup:1576: inode #2: comm smit: deleted inode referenced: 374xxxxx
EXT4-fs error (device nvme0n1p1): ext4_lookup:1576: inode #2: comm smit: deleted inode referenced: 374xxxxx
EXT4-fs error (device nvme0n1p1): ext4_lookup:1576: inode #2: comm cmdbsvr_iprop e: deleted inode referenced: 95xxxxx
EXT4-fs error (device nvme0n1p1): ext4_lookup:1576: inode #2: comm cmdbsvr_iprop e: deleted inode referenced: 95xxxxx
-----------------------------------------------------------
Note:
As TFTP software, Tftptd32/Tftpd64 usually works quite well.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.