Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
salassilvaj
New Contributor III

readonly remote access to Fortigate40F from Forticloud

I've upgrade by gui a 40F Fortigate from 07.4.0 to 07.4.2 and readonly view is the only access I have by gui. By cli all permissions are granted, until now according troubleshooting there is no chance to roll back from 07.4.2 to 07.4.0 by gui or cli, cli error output shows: "Firmware update license is expired. Please update to a valid license" similar output showed by GUI.

 

Community, do you have any feedback?

Jonathan Salas
Jonathan Salas
1 Solution
akumar02
Staff
Staff

Hello Jonathan,
Are you logged in as "admin" to the fortigate?
Also, How did you upgrade the FortiOS earlier? Did you download the image from support.fortinet.com or directly upgrade it from Fortigate GUI?
I would recommend you to console into the Fortigate and rollback to the previous version:

Rolling back the device is simply booting to the previous partition, which has the old firmware and config file. You may boot to the new firmware again if you choose.
The commands to do so are as follows

diag sys flash list <----------------------------------list partitions and see if they are active.
exec set-next-reboot <primary|secondary> <-----------indicate what partition to boot from (1= primary, 2 = secondary)
exec reboot

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Selecting-an-alternate-firmware-for-the-ne...

If this doesn't help then you can boot up from other partition as well:

https://help.fortinet.com/fweb/admin_hlp/4-4-3/wwhelp/wwhimpl/common/html/wwhelp.htm?context=FortiWe...

 

 

Best Regards,
. . . . . . . . . . . . . . . . . . . . . . . .
Arun Kumar | TAC Engineer II
FORTINET TAC - America EAST
NSE Certified: 1,2,3,4,5,7
Office Hours: 9AM-6PM EST (Tue-Sat)
Contact: https://fortinet.com/support-and-training/support/contact.html
Community Forum: https://community.fortinet.com
# Is there anything Fortinet could have assisted with further, better, or differently?
# Simply request a Manager follow-up

View solution in original post

3 REPLIES 3
akumar02
Staff
Staff

Hello Jonathan,
Are you logged in as "admin" to the fortigate?
Also, How did you upgrade the FortiOS earlier? Did you download the image from support.fortinet.com or directly upgrade it from Fortigate GUI?
I would recommend you to console into the Fortigate and rollback to the previous version:

Rolling back the device is simply booting to the previous partition, which has the old firmware and config file. You may boot to the new firmware again if you choose.
The commands to do so are as follows

diag sys flash list <----------------------------------list partitions and see if they are active.
exec set-next-reboot <primary|secondary> <-----------indicate what partition to boot from (1= primary, 2 = secondary)
exec reboot

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Selecting-an-alternate-firmware-for-the-ne...

If this doesn't help then you can boot up from other partition as well:

https://help.fortinet.com/fweb/admin_hlp/4-4-3/wwhelp/wwhimpl/common/html/wwhelp.htm?context=FortiWe...

 

 

Best Regards,
. . . . . . . . . . . . . . . . . . . . . . . .
Arun Kumar | TAC Engineer II
FORTINET TAC - America EAST
NSE Certified: 1,2,3,4,5,7
Office Hours: 9AM-6PM EST (Tue-Sat)
Contact: https://fortinet.com/support-and-training/support/contact.html
Community Forum: https://community.fortinet.com
# Is there anything Fortinet could have assisted with further, better, or differently?
# Simply request a Manager follow-up
salassilvaj
New Contributor III

It works, really preciated

 

# get sys stat
Version: FortiGate-40F v7.4.0,build2360,230509 (GA.F)
Security Level: 2
Firmware Signature: certified

 

# diag sys flash list

Partition Image TotalSize(KB) Used(KB) Use% Active
1 FGT40F-7.04-FW-build2360-230509 253920 171908 68% Yes
2 FGT40F-7.04-FW-build2571-231219 253920 187676 74% No

Jonathan Salas
Jonathan Salas
akumar02

I am glad it worked for you. 

Best Regards,
. . . . . . . . . . . . . . . . . . . . . . . .
Arun Kumar | TAC Engineer II
FORTINET TAC - America EAST
NSE Certified: 1,2,3,4,5,7
Office Hours: 9AM-6PM EST (Tue-Sat)
Contact: https://fortinet.com/support-and-training/support/contact.html
Community Forum: https://community.fortinet.com
# Is there anything Fortinet could have assisted with further, better, or differently?
# Simply request a Manager follow-up
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors