Getting started with FortiGate-7000
Installing firmware on an FIM or FPM module from the BIOS using a TFTP server
5. Press Ctrl-T to enter console switch mode.
6. Repeat pressing Ctrl-T until you have connected to the module to be updated. Example prompt:
<Switching to Console: FIM02 (9600)>
7. Optionally log into the FIM module's CLI.
8. Reboot the FIM module to be updated.
You can do this using the
execute reboot
command from the CLI or by pressing the power switch on the
module front panel.
9. When the FIM module starts up, follow the boot process in the terminal session and press any key when prompted
to interrupt the boot process.
10. Press
C
to set up the TFTP configuration.
11. Use the BIOS menu to set the following. Only change settings if required.
[P]: Set image download port:
MGMT1 (change if required)
[D]: Set DHCP mode:
Disabled
[I]: Set local IP address:
A temporary IP address to be used to connect to the TFTP server. This
address must not be the same as the chassis management IP address and cannot conflict with other
addresses on your network
[S]: Set local Subnet Mask
: Set as required for your network.
[G]: Set local gateway
: Set as required for your network.
[V]: Local VLAN ID
: Use -1 to clear the Local VLAN ID.
[T]: Set remote TFTP server IP address
: The IP address of the TFTP server.
[F]: Set firmware image file name
: The name of the firmware file to be installed.
12. Press Q to quit this menu.
13. Press R to review the configuration.
If you need to make any corrections, press C and make the changes as required. When the configuration is correct
proceed to the next step.
14. Press T to start the TFTP transfer.
The firmware image is uploaded from the TFTP server and installed on the FIM module which then reboots. When
it starts up the module's configuration is reset to factory defaults. The module's configuration is synchronized to
match the configuration of the primary module. The new module reboots again and can start processing traffic.
15. Verify that the configuration has been synchronized.
The following command output shows the sync status of the FIM modules in a FortiGate-7000 chassis. The field
in_sync=1
indicates that the configurations of the modules are synchronized.
diagnose sys confsync
status | grep in_sy
FIM04E3E16000080, Slave, uptime=177426.45, priority=2,
slot_id=1:2, idx=0, flag=0x0, in_sync=1
FIM10E3E16000063, Master, uptime=177415.38, priority=1,
slot_id=1:1, idx=1, flag=0x0, in_sync=1
If
in_sync
is not equal to 1 or if a module is missing in the command output you can try restarting the
modules in the chassis by entering execute reboot from any module CLI. If this does not solve the problem,
contact Fortinet support.
FortiGate-7000
Fortinet Technologies Inc.
42
