Installing firmware on an FIM or FPM module from the BIOS using a TFTP server
Operating a FortiGate-7000
You might want to use this procedure if you need to reset the configuration of a module to factory defaults by
installing firmware from a reboot. You can also use this procedure if you have formatted one or more FIM or
FPM modules from the BIOS by interrupting the boot process.
This procedure involves creating a connection between a TFTP server and one of the MGMT interfaces of one of
the FIM modules, using a chassis console port to connect to the CLI of the module that you are upgrading the
firmware for, rebooting this module, interrupting the boot from the console session, and installing the firmware.
This section includes two procedures, one for upgrading FIM modules and one for upgrading FPM modules. The
two procedures are very similar but a few details, most notably the local VLAN ID setting are different. If you need
to update both FIM and FPM modules, you should update the FIM modules first as the FPM modules can only
communicate with the TFTP server through FIM module interfaces.
Uploading firmware from a TFTP server to an FIM module
Use the following steps to upload firmware from a TFTP server to an FIM module. This procedure requires
Ethernet connectivity between the TFTP server and one of the FIM module's MGMT interfaces.
During this procedure, the FIM module will not be able to process traffic so, if possible, perform this procedure
when the network is not processing any traffic.
If you are operating an HA configuration, you should remove the chassis from the HA configuration before
performing this procedure.
1. Set up a TFTP server and copy the firmware file to be installed into the TFTP server default folder.
2. Set up your network to allow traffic between the TFTP server and one of the MGMT interfaces of the FIM module
to be updated.
If the MGMT interface you are using is one of the MGMT interfaces connected as a LAG to a switch you must
shutdown or disconnect all of the other connections in the LAG from the switch. This includes the MGMT
interfaces in the other FIM module.
3. Connect the console cable supplied with your chassis to the Console 1 port on your chassis front panel and to your
management computer's RS-232 console port.
4. Start a terminal emulation program on the management computer. Use these settings:
Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
5. Press Ctrl-T to enter console switch mode.
6. Repeat pressing Ctrl-T until you have connected to the module to be updated. Example prompt:
<Switching to Console: FIM02 (9600)>
7. Optionally log into the FIM module's CLI.
8. Reboot the FIM module to be updated.
You can do this using the
execute reboot
command from the CLI or by pressing the power switch on the
module front panel.
9. When the FIM module starts up, follow the boot process in the terminal session and press any key when prompted
to interrupt the boot process.
10. Press
C
to set up the TFTP configuration.
11. Use the BIOS menu to set the following. Only change settings if required.
[P]: Set image download port:
MGMT1 (change if required)
[D]: Set DHCP mode:
Disabled
47
FortiGate-7000
Fortinet Technologies Inc.
