Hello,
need to upgrade from 5.0.11 to 5.2.6 fortigate 800C active/passive. If something goes wrong I know it is possible to boot from the partition where I still have 5.0.11. Is that correct and how to eventually achieve it ?
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
On a FGT where you have two partitions, you can use the following command to see what is your active partition : diagnose sys flash list
You will get a result like below :
Partition Image TotalSize(KB) Used(KB) Use% Active 1 FG-5KD-5.02-FW-build670-160422 253871 45550 18% Yes 2 FG-5KD-5.02-FW-build670-150715 253871 45917 18% No 3 EXDB-1.00000 14866900 39164 0% No
In this example, the active partition is the primary. To reboot from the second partition, the command to use is : execute set-next-reboot secondary
and then reboot the unit (if the active partition is 2 and you want to reboot from partition 1, replace secondary with primary)
If you have a cluster, then you need to look what is the active partition on each cluster unit, use the "exec set-next-reboot" on each cluster unit and reboot each cluster unit.
If your upgrade is from 5.0.11 to 5.2.6 , it seems (see http://cookbook.fortinet.com/sysadmins-notebook/supported-upgrade-paths-fortios/4/) that you can go directly from 5.0.11 to 5.2.6. So as your upgrade can be done in one step, you can go back to 5.0.11 and config used with 5.0.11 using the reboot from the other partition.
If you have an intermediate upgrade step between 5.0.11 and 5.2.6 you would not be able to go back to 5.0.11 this way, only to the previous version used before the last upgrade
EDIT: I was wrong...
No, not correct. Rollback is not possible that way.
Take a backup of your running config (downgrade of config is NOT supported).
Upgrade via the supported upgrade path. Do a backup of the config at every firmware upgrade step.
Make sure you have the old firmware at home before you begin.
If you need to rollback, install the old firmware, and reload your old config that matches the firmware.
Edit: When you upgrade, the cluster will patch the slave Fortigate first. If it pass all checks after boot, the cluster will fail-over to the slave and patch the master.
Richie
NSE7
On a FGT where you have two partitions, you can use the following command to see what is your active partition : diagnose sys flash list
You will get a result like below :
Partition Image TotalSize(KB) Used(KB) Use% Active 1 FG-5KD-5.02-FW-build670-160422 253871 45550 18% Yes 2 FG-5KD-5.02-FW-build670-150715 253871 45917 18% No 3 EXDB-1.00000 14866900 39164 0% No
In this example, the active partition is the primary. To reboot from the second partition, the command to use is : execute set-next-reboot secondary
and then reboot the unit (if the active partition is 2 and you want to reboot from partition 1, replace secondary with primary)
If you have a cluster, then you need to look what is the active partition on each cluster unit, use the "exec set-next-reboot" on each cluster unit and reboot each cluster unit.
If your upgrade is from 5.0.11 to 5.2.6 , it seems (see http://cookbook.fortinet.com/sysadmins-notebook/supported-upgrade-paths-fortios/4/) that you can go directly from 5.0.11 to 5.2.6. So as your upgrade can be done in one step, you can go back to 5.0.11 and config used with 5.0.11 using the reboot from the other partition.
If you have an intermediate upgrade step between 5.0.11 and 5.2.6 you would not be able to go back to 5.0.11 this way, only to the previous version used before the last upgrade
That was what I needed. Thanks a lot Jocelyn!
Cool, I didn't have a clue about this. Thanks for setting things straight Jocelyn!
Richie
NSE7
Very good info to have. Thanks Jocelyn
Mike Pruett
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1705 | |
1093 | |
752 | |
446 | |
230 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.