Help!!!! Corrupt Fortios / How to restore Fortios

[#1]

I have a Fortigate 60. I was updating my firmware images from V2.50 MR8 to V2.80 MR4. I followed all instructions in the release notes, to update to V2.50 MR10 first and then to V2.80 MR4. Everything goes well until the stage from V2.50 MR10 to V2.80 MR4. After I update the firmware image, I am totally unable to access the web interface, I tried to ping the FGT-60 and there was no response too. Finally, I used the serial com port n through HyperTerminal tried to access it and it said my Fortios was corrupted. So I had to access the config menu and reformat my FGT-60. After that, I am totally unable to restore back the FortiOS. Pls teach me how to do it? Thanks in advance. Ray.

[John58]

I have had the same problem. In my destination a defect image was downloaded. But - it was corrupted inhouse. There was an defect port at the switch. After find this error and download a new image, i installed the image via TFTP over CLI. At startup (Hyperterminal connect) hit a key then download image. But now, you have to configure all your settings (new configuration by hand). Other way could be a restore of the V2.50 and then do again install of new downloaded image - V2.80. hope it helps John

[#3]

Hi John, Thanx for ur reply. However, after I formatted the FGT-60, when I run the HyperTerminal, it just gave me a blank screen. Secondly, how do I download the image via TFTP through CLI in HyperTerminal? I have already downloaded 3CDaemon HyperTerminal but is stuck at this point. Thanx. Ray.

[John58]

its normaly easy way. start 3com-tftp config allow everyone to connect and copy the image into the folder witch belongs to tftp in 3com tool. now restart fgt60 -> press any-key (dont know where this key is on your side) -> looks like this..... Total RAM: 128MB Enabling cache...Done. Scanning PCI bus...Done. Allocating PCI resources...Done. Enabling PCI resources...Done. Zeroing IRQ settings...Done. Verifying PIRQ tables...Done. No boot device on channel 1,drive 1. boot device capacity: 3456MB. Press any key to display configuration menu... .. : Get firmware image from TFTP server. : Format boot device. : Quit menu and continue to boot with default firmware. : Display this list of options. Enter G,F,Q,or H: Press G insert IP-Adr from tftp-srv -> write ip-adr for the fgt60 (must belong to the subnet) -> name from the image and then start it. on tftp you should see the start and the counter from download after that you should allow to write into eprom - thats it restart ftg60 and with hyperterminal you set a ip-adr -> begin to configure. John

[#5]

Hi John, I got what u mean already. However, after this problem happened in the first time, I accidentally chose option Format Boot Device. So even the hyperterminal option was gone alreadi. By the way, for ur case, where is the Any-Key located? Thanx. Ray.

[#6]

help! i keep seeing the GET request in the 3com tftp, but it never starts the transfer, and keeps repeating the reuqest. whats missing?? ???

[John58]

This Any-Key is my biggest problem since 1985. I searched it as long as 20 years -but i cann' t find it. Its like this true story of my job. " Please make a copy and send it to me" . 20 min later a fax arrived with a copy of a disk. And after all the same woman was told " please write edit" she answered " oh my name isn' t Edit (Germany name) i' m Katrin" - you see - it' s unbelievable hard to find all the right way. John

[UkWizard]

This Any-Key is my biggest problem since 1985. I searched it as long as 20 years -but i cann' t find it. Its like this true story of my job. " Please make a copy and send it to me" . 20 min later a fax arrived with a copy of a disk. And after all the same woman was told " please write edit" she answered " oh my name isn' t Edit (Germany name) i' m Katrin" - you see - it' s unbelievable hard to find all the right way. John

You aint seen stupid, until you see a user trying to insert a cdrom into a floppy disk slot ...... i have, now thats stupid ...

[#9]

Hi John, Finally got ur meaning of any-key alreadi. However, the thing is, when I start HyperTerminal after formatting the boot device. It just gave me a blank white screen and doesn' t do anything. I do not even have the chance to enter the configuration menu. Is there anything I could do to get the HyperTerminal boot up the FortiOS again after formatting the boot device? Ray.

[John58]

Hi Ray, if you switch off and on the FGT and don' t stop the hyperterminal (it must on and connected via RS232 all the time) then you see nothing all the time? In this way, i think, your FGT is out of order - call Fortinet for RMA. I have had a really broken FGT, RAM are defect, but all the time i could see the startup like this: FGT60 (19:33-06.05.2003) Ver:03000300 Serial number:FGT-60210 RAM activation Total RAM: 128MB Enabling cache...Done. Scanning PCI bus...Done. Allocating PCI resources...Done. Enabling PCI resources...Done. Zeroing IRQ settings...Done. Verifying PIRQ tables...Done. Boot up, boot device capacity: 30MB. Press any key to display configuration menu... ...... Reading boot image 1181256 bytes. Initializing firewall... FGT60 (19:33-06.05.2003) Ver:03000300 Serial number:FGT-60210 RAM activation Total RAM: 128MB Enabling cache...Done. Scanning PCI bus...Done. Allocating PCI resources...Done. Enabling PCI resources...Done. Zeroing IRQ settings...Done. Verifying PIRQ tables...Done. No boot device on channel 1,drive 1. boot device capacity: 3456MB. Press any key to display configuration menu... .. : Get firmware image from TFTP server. : Format boot device. : Quit menu and continue to boot with default firmware. : Display this list of options. Enter G,F,Q,or H: dr: Disable onboard RAM. rt: Start RAM test. offc: Turn off cache. onc: Turn on cache. lpci: List all PCI devices. spci: Set PCI configuration registers. q: Quit debug mode. h: Display this command list. :lpci 00:00.00 1106:0601 00:01.00 1106:8601 00:0d.00 15bc:4001 00:0e.00 1106:3053 00:0f.00 1106:3053 00:10.00 1106:3053 00:11.00 1106:8231 00:11.01 1106:0571 00:11.02 1106:3038 00:11.04 1106:8235 00:12.00 1106:3065 :rt Total RAM: 128MB 0 00000000 0 00400000 0 00800000 0 00c00000 Memory test 0 failed 000000ca times, start=05a030bc Memory test 1 failed 00000051 times, start=05a034dc 2 04800000 2 05000000 2 05800000Error: 05a03004(04) 00000400!=00000000 Error: 05a07044(04) 08080908!=08080808 Error: 05a07084(04) 10101410!=10101010 Error: 05a13054(04) 0a0a0b0a!=0a0a0a0a Error: 05a1b044(04) 08080908!=08080808 Error: 05a23304(04) 60606160!=60606060 Error: 05a3302c(04) 05050705!=05050505 Quick Memory Scan, Length=07f00000 : :h dr: Disable onboard RAM. rt: Start RAM test. offc: Turn off cache. onc: Turn on cache. lpci: List all PCI devices. spci: Set PCI configuration registers. q: Quit debug mode. John