Hi,
I tried to restore an image from an http server with
execute restore image url http://192.168.1.100:8844/firmware.out
and it does not work. (according to help the FTP protocol understands the syntax <ftp server>[:ftp port]) I don't even see a connection attempt when monitoring it with tcpdump on the webserver. I can however download the file on my pc with firefox. (FGT, Webserver & PC all in the same network)
For test I activated port 80 on the webserver and then
execute restore image url http://192.168.1.100/firmware.out
works. So it looks like it only works when the server runs on a standard port.
That's fine for the test, but we won't be using standard port, so Is there a way to make image restore work using an alternative webserver port?
(The idea behind it is that we can not get the image from an internal server which is accessible only via an IPSEC tunnel. Therefore we need to use a server on a public IP which does not run on the default ports)
Kind regards,
Tonny
It seems like the command is not able to distinguish the port from the FQDN of the server and is failing to resolve it, that's why you don't see any connection attempt :
Connect to http(s) server ...
Failed to resolve address for: www.eb.eu:80
Can not get image from http server via vdom root.
Command fail. Return code -39
The command doesn't allow to include a port in the url, details can be found in CLI Reference.
User | Count |
---|---|
2570 | |
1364 | |
796 | |
651 | |
455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.