Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Tonny
New Contributor

restore image using http on alternative webserver port

Hi,
I tried to restore an image from an http server with

execute restore image url http://192.168.1.100:8844/firmware.out


and it does not work. (according to help the FTP protocol understands the syntax <ftp server>[:ftp port]) I don't even see a connection attempt when monitoring it with tcpdump on the webserver. I can however download the file on my pc with firefox. (FGT, Webserver & PC all in the same network)

For test I activated port 80 on the webserver and then

execute restore image url http://192.168.1.100/firmware.out

works. So it looks like it only works when the server runs on a standard port.

That's fine for the test, but we won't be using standard port, so Is there a way to make image restore work using an alternative webserver port?

(The idea behind it is that we can not get the image from an internal server which is accessible only via an IPSEC tunnel. Therefore we need to use a server on a public IP which does not run on the default ports)

Kind regards,
Tonny

1 REPLY 1
ebilcari
Staff
Staff

It seems like the command is not able to distinguish the port from the FQDN of the server and is failing to resolve it, that's why you don't see any connection attempt :

 

Connect to http(s) server ...
Failed to resolve address for: www.eb.eu:80 
Can not get image from http server via vdom root.
Command fail. Return code -39

 

The command doesn't allow to include a port in the url, details can be found in CLI Reference.

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors