background image

FortiGate-5000 Series Version 3.0 MR4 Firmware and FortiUSB Guide

12

01-30004-0383-20070201

Installing firmware images from a system reboot using the CLI

FortiGate firmware

5

Enter the following command to copy the firmware image from the TFTP server to 
the FortiGate module: 

execute restore image <name_str> <tftp_ipv4>

Where 

<name_str> 

is the name of the firmware image file and 

<tftp_ipv4>

 is 

the IP address of the TFTP server. For example, if the firmware image file name is 

image.out 

and the IP address of the TFTP server is 192168.1.68, enter: 

execute restore image image.out 192.168.1.168

The FortiGate module responds with this message: 

This operation will replace the current firmware version!

Do you want to continue? (y/n)

6

Type 

y

.

The FortiGate module uploads the firmware image file. After the file uploads, a 
message similar to the following is displayed:

Get image from tftp server OK.

Check image OK. 

This operation will downgrade the current firmware 

version!

Do you want to continue? (y/n)

7

Type 

y

.

The FortiGate module reverts to the old firmware version, resets the configuration 
to factory defaults, and restarts. This process takes a few minutes. 

8

Reconnect to the CLI.

9

To confirm the new firmware image has been loaded, enter: 

get system status

10

To restore your previous configuration, if needed, use the command: 

execute restore config <name_str> <tftp_ip4>

11

Update antivirus and attack definitions. You can use the command 

execute update-now

Installing firmware images from a system reboot using the CLI

This procedure installs a specified firmware image and resets the FortiGate 
module to default settings. You can use this procedure to upgrade to a new 
firmware version, revert to an older firmware version, or re-install the current 
firmware version.

To use this procedure, you must connect to the CLI using the FortiGate console 
cable. This procedure reverts the FortiGate module to its factory default 
configuration.

For this procedure you: 

Access the CLI by connecting to the FortiGate console port using the console 
cable.

Connect a FortiGate interface to your network.

Have a TFTP server that you can connect to from the FortiGate interface.

Summary of Contents for FortiGate-5000

Page 1: ...ILTER 1 2 0 1 2 10 100 link Act ETH0 Service RESET STATUS Hot Swap link Act ETH0 ETH1 10 100 5000SM 10 100 link Act ETH0 Service RESET STATUS Hot Swap link Act ETH0 ETH1 10 100 5000SM PSU A PSU B CONS...

Page 2: ...iBIOS FortiBridge FortiClient FortiGate FortiGate Unified Threat Management System FortiGuard FortiGuard Antispam FortiGuard Antivirus FortiGuard Intrusion FortiGuard Web FortiLog FortiAnalyzer FortiM...

Page 3: ...ts on Fortinet technical documentation 7 Customer service and technical support 7 Register your Fortinet product 8 FortiGate firmware 9 Upgrading to a new firmware version 9 Reverting to a previous fi...

Page 4: ...FortiGate 5000 Series Version 3 0 MR4 Firmware and FortiUSB Guide 4 01 30004 0383 20070201 Contents...

Page 5: ...uld be allowed to install or maintain FortiGate 5000 series equipment Read and comply with all warnings cautions and notices in this document Turning off all power switches may not turn off all power...

Page 6: ...maximum rated ambient temperature Installing FortiGate equipment in a rack should be such that the amount of airflow required for safe operation of the equipment is not compromised This equipment is...

Page 7: ...et Technical Documentation web site at http docs forticare com FortiGate 5000 series documentation is located in its own section of the site at http docs forticare com fgt5k html Fortinet Knowledge Ce...

Page 8: ...register your product for FortiGuard services such as FortiGuard Antivirus and Intrusion Prevention updates and for FortiGuard Web Filtering and AntiSpam Register your product by visiting http suppor...

Page 9: ...d of the same firmware version To upgrade the firmware using the web based manager 1 Copy the firmware image file to your management computer 2 Log into the FortiGate web based manager 3 Go to System...

Page 10: ...r is 192 168 1 168 enter execute restore image image out 192 168 1 168 The FortiGate module responds with the message This operation will replace the current firmware version Do you want to continue y...

Page 11: ...rtiGate online help for details 10 Update the FortiGate antivirus and attack definitions See the FortiGate online help for details To revert to a previous firmware version using the CLI To use the fol...

Page 12: ...to continue y n 7 Type y The FortiGate module reverts to the old firmware version resets the configuration to factory defaults and restarts This process takes a few minutes 8 Reconnect to the CLI 9 T...

Page 13: ...command to restart the FortiGate module execute reboot The FortiGate module responds with the following message This operation will reboot the system Do you want to continue y n 6 Type y As the FortiG...

Page 14: ...form the TFTP server The following message appears Enter TFTP server address 192 168 1 168 13 Type the address of the TFTP server and press Enter The following message appears Enter Local Address 192...

Page 15: ...ip4 4 Update antivirus and attack definitions You can use the command execute update now Testing a new firmware image before installing it You can test a new firmware image by installing the firmware...

Page 16: ...configuration menu 7 Immediately press any key to interrupt the system startup If you successfully interrupt the startup process the following menu appears G Get firmware image from TFTP server F For...

Page 17: ...interface for uploading the firmware image from the TFTP server The IP address can be any IP address that is valid for the network that the image download interface is connected to Make sure you do n...

Page 18: ...FortiGate 5000 Series Version 3 0 MR4 Firmware and FortiUSB Guide 18 01 30004 0383 20070201 Testing a new firmware image before installing it FortiGate firmware...

Page 19: ...rtiUSB key Backup and Restore from the FortiUSB key You can use the FortiUSB key to either backup a configuration file or restore a configuration file You should always make sure the FortiUSB key is p...

Page 20: ...e the configuration files exec restore image usb filename The FortiGate module responds with the following message This operation will replace the current firmware version Do you want to continue y n...

Page 21: ...stall using the CLI 1 Log into the CLI 2 Enter the following command config system auto install set default config file filename set auto intall config enable disable set default image file filename s...

Page 22: ...FortiGate 5000 Series Version 3 0 MR4 Firmware and FortiUSB Guide 22 01 30004 0383 20070201 Additional CLI commands for the FortiUSB key The FortiUSB key...

Page 23: ...www fortinet com...

Reviews: