background image

FortiGate firmware 

Installing firmware images from a system reboot using the CLI

FortiGate-5000 Series Version 3.0 MR4 Firmware and FortiUSB Guide
01-30004-0383-20070201

13

Before beginning this procedure, it is recommended that you: 

back up the FortiGate system configuration (from the CLI, use the command 

execute backup config

)

back up the IPS custom signatures (from the CLI, use the command

 execute 

backup ipsuserdefsig

)

back up web content and email filtering lists 

If you are reverting to a previous FortiOS version, you might not be able to restore 
the previous configuration from the backup configuration file.

To install firmware from a system reboot

1

Connect a management computer to the FortiGate CLI using the FortiGate 
console port.

2

Connect a FortiGate interface to your network.

3

Make sure the TFTP server is running and connected to the same network as the 
FortiGate interface.

4

Copy the new firmware image file to the root directory of the TFTP server. 

5

Enter the following command to restart the FortiGate module. 

execute reboot

The FortiGate module responds with the following message: 

This operation will reboot the system!

Do you want to continue? (y/n)

6

Type 

y

.

As the FortiGate module starts, a series of system startup messages is displayed. 
When the following messages appears:

Press any key to display configuration menu..........

......

7

Immediately press any key to interrupt the system startup.

.

If you successfully interrupt the startup process, a menu similar to the following 
appears: 

[G]: Get firmware image from TFTP server.

[F]: Format boot device.

[B]: Boot with backup firmware and set as default.

[I]: Configuration and information.

[Q]: Quit menu and continue to boot with default firmware.

[H]: Display this list of options.

Enter G,F,B,I,Q,or H:

Note: 

Installing firmware replaces your current antivirus and attack definitions, along with 

the definitions included with the firmware release you are installing. After you install new 
firmware, make sure that antivirus and attack definitions are up to date.

Note: 

You have only 3 seconds to press any key. If you do not press a key soon enough, 

the FortiGate module reboots and you must log into the CLI again and repeat the 

execute 

reboot

 command. 

Summary of Contents for FortiGate-5000

Page 1: ...ILTER 1 2 0 1 2 10 100 link Act ETH0 Service RESET STATUS Hot Swap link Act ETH0 ETH1 10 100 5000SM 10 100 link Act ETH0 Service RESET STATUS Hot Swap link Act ETH0 ETH1 10 100 5000SM PSU A PSU B CONS...

Page 2: ...iBIOS FortiBridge FortiClient FortiGate FortiGate Unified Threat Management System FortiGuard FortiGuard Antispam FortiGuard Antivirus FortiGuard Intrusion FortiGuard Web FortiLog FortiAnalyzer FortiM...

Page 3: ...ts on Fortinet technical documentation 7 Customer service and technical support 7 Register your Fortinet product 8 FortiGate firmware 9 Upgrading to a new firmware version 9 Reverting to a previous fi...

Page 4: ...FortiGate 5000 Series Version 3 0 MR4 Firmware and FortiUSB Guide 4 01 30004 0383 20070201 Contents...

Page 5: ...uld be allowed to install or maintain FortiGate 5000 series equipment Read and comply with all warnings cautions and notices in this document Turning off all power switches may not turn off all power...

Page 6: ...maximum rated ambient temperature Installing FortiGate equipment in a rack should be such that the amount of airflow required for safe operation of the equipment is not compromised This equipment is...

Page 7: ...et Technical Documentation web site at http docs forticare com FortiGate 5000 series documentation is located in its own section of the site at http docs forticare com fgt5k html Fortinet Knowledge Ce...

Page 8: ...register your product for FortiGuard services such as FortiGuard Antivirus and Intrusion Prevention updates and for FortiGuard Web Filtering and AntiSpam Register your product by visiting http suppor...

Page 9: ...d of the same firmware version To upgrade the firmware using the web based manager 1 Copy the firmware image file to your management computer 2 Log into the FortiGate web based manager 3 Go to System...

Page 10: ...r is 192 168 1 168 enter execute restore image image out 192 168 1 168 The FortiGate module responds with the message This operation will replace the current firmware version Do you want to continue y...

Page 11: ...rtiGate online help for details 10 Update the FortiGate antivirus and attack definitions See the FortiGate online help for details To revert to a previous firmware version using the CLI To use the fol...

Page 12: ...to continue y n 7 Type y The FortiGate module reverts to the old firmware version resets the configuration to factory defaults and restarts This process takes a few minutes 8 Reconnect to the CLI 9 T...

Page 13: ...command to restart the FortiGate module execute reboot The FortiGate module responds with the following message This operation will reboot the system Do you want to continue y n 6 Type y As the FortiG...

Page 14: ...form the TFTP server The following message appears Enter TFTP server address 192 168 1 168 13 Type the address of the TFTP server and press Enter The following message appears Enter Local Address 192...

Page 15: ...ip4 4 Update antivirus and attack definitions You can use the command execute update now Testing a new firmware image before installing it You can test a new firmware image by installing the firmware...

Page 16: ...configuration menu 7 Immediately press any key to interrupt the system startup If you successfully interrupt the startup process the following menu appears G Get firmware image from TFTP server F For...

Page 17: ...interface for uploading the firmware image from the TFTP server The IP address can be any IP address that is valid for the network that the image download interface is connected to Make sure you do n...

Page 18: ...FortiGate 5000 Series Version 3 0 MR4 Firmware and FortiUSB Guide 18 01 30004 0383 20070201 Testing a new firmware image before installing it FortiGate firmware...

Page 19: ...rtiUSB key Backup and Restore from the FortiUSB key You can use the FortiUSB key to either backup a configuration file or restore a configuration file You should always make sure the FortiUSB key is p...

Page 20: ...e the configuration files exec restore image usb filename The FortiGate module responds with the following message This operation will replace the current firmware version Do you want to continue y n...

Page 21: ...stall using the CLI 1 Log into the CLI 2 Enter the following command config system auto install set default config file filename set auto intall config enable disable set default image file filename s...

Page 22: ...FortiGate 5000 Series Version 3 0 MR4 Firmware and FortiUSB Guide 22 01 30004 0383 20070201 Additional CLI commands for the FortiUSB key The FortiUSB key...

Page 23: ...www fortinet com...

Reviews: