FortiAP unit firmware upgrade

You can view and upgrade the FortiAP unit firmware from the FortiGate unit that acts as its WiFi controller.

Checking the FortiAP unit firmware version

To view the list of FortiAP units that the FortiGate unit manages, go to WiFi and Switch Controller > Managed FortiAPs. The OS Version column shows the current firmware version running on each AP.

Upgrading FortiAP firmware from the FortiGate unit

You can upgrade the FortiAP firmware using either the GUI or the CLI. Only the CLI method can update all FortiAP units at once.

To upgrade FortiAP unit firmware - GUI

1. Go to WiFi and Switch Controller > Managed FortiAPs.
2. Right-click the FortiAP unit in the list and select Upgrade.
   or
   Click the row of the FortiAP that you want to upgrade, and click Edit. In Firmware, click Upgrade.
3. Upgrade using FortiGuard, or select Browse and locate the firmware upgrade file.
4. Click Upgrade.
5. When the upgrade process completes, select OK.
   The FortiAP unit restarts.

To upgrade FortiAP unit firmware - CLI

1. Upload the FortiAP image to the FortiGate unit.

   For example, the Firmware file is FAP_22A_v4.3.0_b0212_fortinet.out and the server IP address is 192.168.0.100.

   execute wireless-controller upload-wtp-image tftp FAP_22A_v4.3.0_b0212_fortinet.out 192.168.0.100

   If your server is FTP, change tftp to ftp, and if necessary add your user name and password at the end of the command.

2. Verify that the image is uploaded:

   execute wireless-controller list-wtp-image

3. Upgrade the FortiAP units:

   exec wireless-controller reset-wtp all

   If you want to upgrade only one FortiAP unit, enter its serial number instead of all.

Upgrading FortiAP firmware from the FortiAP unit

You can connect to a FortiAP unit’s internal CLI to update its firmware from a TFTP server on the same network. This method does not require access to the wireless controller.

1. Place the FortiAP firmware image on a TFTP server on your computer.
2. Connect the FortiAP unit to a separate private switch or hub or directly connect to your computer via a cross-over cable.
3. Change your computer IP address to 192.168.1.3.
4. Using SSH, connect to IP address 192.168.1.2.
   This IP address is overwritten if the FortiAP is connected to a DHCP environment. Ensure that the FortiAP unit is in a private network with no DHCP server.
5. Login with the username “admin” and no password.
6. Enter the following command.
   For example, the FortiAP image file name is FAP_22A_v4.3.0_b0212_fortinet.out.

   restore FAP_22A_v4.3.0_b0212_fortinet.out 192.168.1.3