Installing firmware on an FIM or FPM module from the BIOS using a TFTP server
Getting started with FortiGate-7000
Uploading firmware from a TFTP server to an FPM module
Use the following steps to upload firmware from a TFTP server to an FPM module. This procedure requires
Ethernet connectivity between the TFTP server and one of the MGMT interfaces of one of the FIM modules in
the same chassis as the FPM module.
During this procedure, the FPM module will not be able to process traffic so, if possible, perform this procedure
when the network is not processing any traffic. However, the other FPM modules and the FIM modules in the
chassis should continue to operate normally and the chassis can continue processing traffic.
If you are operating an HA configuration, you should remove the chassis from the HA configuration before
performing this procedure.
1. Set up a TFTP server and copy the firmware file to be installed into the TFTP server default folder.
2. Set up your network to allow traffic between the TFTP server and a MGMT interface of one of the FIM modules in
the chassis that also includes the FPM module.
You can use any MGMT interface of either of the FIM modules. If the MGMT interface you are using is one of the
MGMT interfaces connected as a LAG to a switch you must shutdown or disconnect all of the other connections in
the LAG from the switch. This includes the MGMT interfaces in the other FIM module.
3. Connect the console cable supplied with your chassis to the Console 1 port on your chassis front panel and to your
management computer's RS-232 console port.
4. Start a terminal emulation program on the management computer. Use these settings:
Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
5. Press Ctrl-T to enter console switch mode.
6. Repeat pressing Ctrl-T until you have connected to the module to be updated. Example prompt:
<Switching to Console: FPM03 (9600)>
7. Optionally log into the FPM module's CLI.
8. Reboot the FPM module to be updated.
You can do this using the
execute reboot
command from the CLI or by pressing the power switch on the
module front panel.
9. When the FPM module starts up, follow the boot process in the terminal session and press any key when
prompted to interrupt the boot process.
10. Press
C
to set up the TFTP configuration.
11. Use the BIOS menu to set the following. Only change settings if required.
[P]: Set image download port:
The name of the FIM module that can connect to the TFTP server
(FIM01 is the FIM module in slot 1 and FIM02 is the FIM module in slot 2).
[D]: Set DHCP mode:
Disabled.
[I]: Set local IP address:
A temporary IP address to be used to connect to the TFTP server. This
address must not be the same as the chassis management IP address and cannot conflict with other
addresses on your network.
[S]: Set local Subnet Mask
: Set as required for your network.
[G]: Set local gateway
: Set as required for your network.
[V]: Local VLAN ID
: The VLAN ID of the FIM interface that can connect to the TFTP server:
FIM01 local VLAN IDs
43
FortiGate-7000
Fortinet Technologies Inc.
