execute restore

Use the following commands to manually import system files from an FTP/TFTP server or a disk as indicated:

• execute restore configdisk—Use this command to restore the configuration from the backup file on the disk.
• execute restore config-file—Imports a zip file that includes the configuration text file, error page files, script files, ISP address book files, and certificate files. It is imported from a TFTP server.
• execute restore image—Imports a firmware image. It is imported from an FTP or TFTP server.
• execute restore image alternative—Boot alternate firmware. If partition1 is active and then system boots partition2 after executing the command and vice versa.
• execute restore isp-address—Imports an ISP address book text file. When you perform the restore operation, the imported address book takes priority over entries from the predefined address book (default for the firmware image). In systems with multiple VDOMs, the command applies to the current VDOM only. It is imported from a TFTP server.
• execute restore waf-signature—Imports a WAF signature database update. It is imported from an FTP or TFTP server.
• execute restore geo-dp ftp—Imports a geoip database from a TFTP server.
• execute restore geoip-db factory-default—Set geoip database to default.
• execute restore reputation-black-list—Imports a black list ip reputation database. It is imported from a TFTP server.
• execute restore glb-zone-dnssec—Uploads DNSSEC keys to device.

Back up a configuration before restoring a different version. This command restores configuration changes only, and does not affect settings that remain at their default values. Default values might vary by firmware version.

Syntax

execute restore config disk <filename>

execute restore config-file tftp <filename> <ip> <Password>

execute restore image <ftp|tftp|tftp-ha-sync> <filename> <ip>

execute restore image alternative

execute restore isp-address tftp <filename> <ip>

execute restore waf-signature <ftp|tftp> <filename> <ip>

execute restore reputation-black-list tftp <filename> <ip address>

execute restore geoip-db ftp <geoip database name> <ftp server IP>

execute restore geoip-db factory-default

execute restore glb-zone-dnssec <ftp|tftp> zone <zone name> <key file name> <ip>

<filename>	Name of the file.
<ftp|tftp|tftp-ha-sync>	FTP or TFTP server. For HA upgrades, use tftp-ha-sync to upgrade an HA cluster. For details on the HA cluster upgrade process, refer to the FortiADC Handbook.
<ip>	IP address of the FTP/TFTP server.
<password>	Optional. The password is used to unencrypt the backup zip file.

Example

FortiADC-VM # execute restore config-file tftp backup.zip 192.168.1.23

This operation will overwrite the current settings!

Do you want to continue? (y/n)

The FortiADC appliance then applies the configuration backup and reloads.

FortiADC-VM # execute restore config disk FortiADC-backup

This command downloads a configuration file named FortiADC-backup from the disk to the FortiADC appliance.

FortiADC-VM # execute restore glb-zone-dnssec tftp zone testdomain.com. dnssec_testdomain.com.root.tar 10.106.194.12