Firmware image issue

[Octavius]

Hi,

We have a 60D that wouldn't boot and we have managed, after a lot of problems, to get a firmware image on to it via TFTP. However when 'Programming the boot device now.' comes up we get the following:

............................................................*******************

It just keeps adding stars every few minutes. See screenshot. I have formatted the boot device and tried to apply this to both the default and backup firmware with the same result. Any ideas are welcomed.

Octavius

[emnoc]

Here's what I would do;

See if you can get a diagnostic image { HQIP } , if you can run it

Based on that and the messages, you might need to open a case with TAC.

Ken

[Octavius]

Thank you Ken,

I was able to run HQPI, that flashed fine. It showed an error on the boot drive running too slow. I tried reflashing with a full firmware, which seemed to install, but it still does not boot. TAC not an option on this device unfortunately.

[emnoc]

Dumb question, can you use a v5.2 or v5.4 image? Does it exhibit the same issue/error?

[Octavius]

I have tried the latest 5.2, it appeared to program but the device then just fails to boot. I will try a 5.4 image next. Thank you

[Octavius]

So, I have got it back up and running. The final thing I tried was the option at the BIOS, after TFTP'ing the image was to run the image. It then booted up fine. So for those who find themselves in the same fix, here are the steps I took as it is so annoying to see someone ask for help on a forum and then just put 'Fixed it' and no info:

So my issue was the device would not boot or take a new firmware image. It would TFTP on but I would get

..........**************. The fix turned out to be to load the HQIP image, after which I was able to write to the device again. It was still a bit flakey, but running the image from the config menu seemed to sort things.

1. Installed opentftp on my PC

2. Downloaded the latest firmware on the 5.2 stream

3. Downloaded the HQIP image for the 60D

4. Connected the FG to my PC with the USB Mgmt cable

5. Connected WAN1 to my main LAN

6. Ran Fortiexplorer and booted the device

7. Entered the config menu when prompted

8. Option I

9. Select configure DHCP and enable (cannot remember the option)

10. Q to quit back to main menu

11. Option G - Get firmware from TFTP

12. Enter your IP of the TFTP server

13. Enter the image name of the HQIP image

14. Select D or B. I had to try both

15. Let the device do its thing and install. It will reboot and you can then run the diags. More details on this are here:

http://wiki.diagnose.fortinet.com/index.php/Running_an_HQIP_(Hardware_Quick_Inspection_Package)_test & 

http://cookbook.fortinet.com/hqip-test-documentation/

16. I looked at the diags then rebooted the device back into the configuration screen using Fortiexplorer

17. TFTP the latest 5.2 image onto the device - this time it appeared to write, when previously it failed. It did not boot though :(

18. Reboot the device and TFTP the image again, but select R to run. This time it worked and subsequent reboots with power out have worked too.

19. I did get a file system check come up too, so I ran this as a precaution and it has been fine since.

It is possible that step 18 was not required, but it worked for me. More helpful information is here:

http://cookbook.fortinet.com/navigating-the-fortigate-bios/ and many thanks to emnoc for suggesting the HQIP firmware. It has taken the best part of the day to get this up an running, but has saved 1.3K of new Fortigate :)

[rwpatterson]

Great write up on that issue. Many thanks.

[emnoc]

So are you going to re-run a new attempt at 5.6?  I have a FWFW60D and was delaying any attempts at this latest code.

ken