Firmware upgrade and booting to another image

[#1]

Hello, I have a Fortigate 300A running FortiOS 3.0. I need to upgrade it to the same version on another 300A I have: v4.0,build0303,101214 (MR2 Patch 3). * Can I upgrade directly from the old version to 4.0 MR2 or I should upgrade to some other version between? * I noticed that the 300A can save 2 firmware versions. How do I boot to another firmware than the new one I install? * Does it boot to the older firmware when I do a factory reset to the appliance? Thanks.

[Jan_Scholten]

When you want to have a clean install do a factory reset and just upload the new firmware. If you want to upgrade follow the upgrade path which is clearly described in the Release notes. AFAIK every Fortigate has two firmware which you can boot as alternative ( i think System > Maintenance > Backup and Restore. There should be both partitions visible with a button to boot the alternate firmware) You can do that on CLI as well: execute set-next-reboot {primary | secondary} Execute firmware sets the config (not the firmware) to the default one. So your firmware stays, only your interfaces get 192.168.1.99,192.168.2.99 aso..

[rwpatterson]

ORIGINAL: Jan Scholten AFAIK every Fortigate has two firmware which you can boot as alternative ( i think System > Maintenance > Backup and Restore. There should be both partitions visible with a button to boot the alternate firmware)

I believe only the boxes bigger than the 100 series do have two.

[Jan_Scholten]

Really? At least the 60C has (i must admit i have not many fgts below a 100A) i just checked: a 50B does not have dual firmwares.. Nevertheless: the 300A should have two partitions.

[rwpatterson]

OK, how about the smallest boxes (30, 50, 50A, 50B, 60, 60A & 60B) do not have this option. My 80C does. Omelet in the face...

[#6]

Is it possible to switch to the other firmware in case an upgrade fail?

[FortiRack_Eric]

yes, in pre-boot (console) you can switch to alternative firmware Cheers, Eric

[FortiRack_Eric]

60b, 50b, 30b, 50a don' t have the dual image 60c, 51b do. Cheers, Eric