hi,
i'll be doing an OS upgrade on a FG HA pair.
if for some reason I need to "downgrade", do I just select the OLD firmware, reboot and then restore the config referenced to the OLD firmware?
is the downgrade the same as upgrade process, i.e. i only upload the firmware in the primary/active FG, it will auto push firmware to secondary, auto reboot secondary, then auto reboot primary?
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi,
If it is single upgrade then you can choose the secondary partition to restore the older upgrade image.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Selecting-an-alternate-firmware-for-the-ne...
If there are multiple firmware upgrades and you need to revert to the original version. By referring to the given article, you must format the flash with a TFTP server and load the initial firmware version. Then, restore the configuration file that was saved prior to the upgrade.
Hi,
If it is single upgrade then you can choose the secondary partition to restore the older upgrade image.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Selecting-an-alternate-firmware-for-the-ne...
If there are multiple firmware upgrades and you need to revert to the original version. By referring to the given article, you must format the flash with a TFTP server and load the initial firmware version. Then, restore the configuration file that was saved prior to the upgrade.
Created on 09-04-2024 07:19 PM Edited on 09-04-2024 07:57 PM
hi,
thanks for the link!
i have HA active-passive setup.
can you please confirm which partition/OS do i choose if i want to "downgrade" from 7.2.5 > 7.2.4?
in the case below, is partition 1 = primary, then partition 2 = secondary?
do i use the command "execute set-next-reboot primary" to do a downgrade to 7.2.4?
FG-PRI # config global
FG-PRI (global) # diag sys flash list
Partition Image TotalSize(KB) Used(KB) Use% Active
1 FG201F-7.02-FW-build1396-230131 253871 102430 40% No <<< 7.2.4
2 FG201F-7.02-FW-build1517-230606 253871 115176 45% Yes <<< 7.2.5
3 ETDB-1.00000 28327040 249692 1% No
Image build at Jun 6 2023 16:48:30 for b1517
FG-PRI (global) # execute set-next-reboot
primary partition
secondary partition
Hi,
Yes.It is Partition # 1 is primary and # 2 is secondary.
If you select the image which is already running then the following error will be displayed.
FG180F-3 # execute set-next-reboot primary
Image# 1 is already the default image.
-Habeeb
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1502 | |
1013 | |
749 | |
443 | |
209 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.