Fortinet black logo

CLI Reference

Loading firmware

Loading firmware

The BIOS can download firmware from a TFTP server that is reachable from a FortiGate unit network interface. You need to know the IP address of the server and the name of the firmware file to download.

The downloaded firmware can be saved as either the default or backup firmware. It is also possible to boot the downloaded firmware without saving it.

Configuring TFTP parameters

Starting from the main BIOS menu

[C]: Configure TFTP parameters.

Selecting the VLAN (if VLANs are used)

[V]: Set local VLAN ID.

Choose port and whether to use DHCP

[P]: Set firmware download port.

The options listed depend on the FortiGate model. Choose the network interface through which the TFTP server can be reached. For example:

[0]: Any of port 1 - 7

[1]: WAN1

[2]: WAN2

Enter image download port number [WAN1]:

[D]: Set DHCP mode.

Please select DHCP setting

[1]: Enable DHCP

[2]: Disable DHCP

If there is a DHCP server on the network, select [1]. This simplifies configuration. Otherwise, select [2].

Non-DHCP steps

[I]: Set local IP address.

Enter local IP address [192.168.1.188]:

This is a temporary IP address for the FortiGate unit network interface. Use a unique address on the same subnet to which the network interface connects.

[S]: Set local subnet mask.

Enter local subnet mask [255.255.252.0]:

[G]: Set local gateway.

The local gateway IP address is needed if the TFTP server is on a different subnet than the one to which the FortiGate unit is connected.

TFTP and filename

[T]: Set remote TFTP server IP address.

Enter remote TFTP server IP address [192.168.1.145]:

[F]: Set firmware file name.

Enter firmware file name [image.out]:

Enter [Q] to return to the main menu.

Initiating TFTP firmware transfer

Starting from the main BIOS menu

[T]: Initiate TFTP firmware transfer.

Please connect TFTP server to Ethernet port 'WAN1'.

MAC: 00:09:0f:b5:55:28

Connect to tftp server 192.168.1.145 ...

##########################################################

Image Received.

Checking image... OK

Save as Default firmware/Backup firmware/Run image without

saving:[D/B/R]?

After you choose any option, the FortiGate unit reboots. If you choose [D] or [B], there is first a pause while the firmware is copied:

Programming the boot device now.

................................................................

................................................................

Loading firmware

The BIOS can download firmware from a TFTP server that is reachable from a FortiGate unit network interface. You need to know the IP address of the server and the name of the firmware file to download.

The downloaded firmware can be saved as either the default or backup firmware. It is also possible to boot the downloaded firmware without saving it.

Configuring TFTP parameters

Starting from the main BIOS menu

[C]: Configure TFTP parameters.

Selecting the VLAN (if VLANs are used)

[V]: Set local VLAN ID.

Choose port and whether to use DHCP

[P]: Set firmware download port.

The options listed depend on the FortiGate model. Choose the network interface through which the TFTP server can be reached. For example:

[0]: Any of port 1 - 7

[1]: WAN1

[2]: WAN2

Enter image download port number [WAN1]:

[D]: Set DHCP mode.

Please select DHCP setting

[1]: Enable DHCP

[2]: Disable DHCP

If there is a DHCP server on the network, select [1]. This simplifies configuration. Otherwise, select [2].

Non-DHCP steps

[I]: Set local IP address.

Enter local IP address [192.168.1.188]:

This is a temporary IP address for the FortiGate unit network interface. Use a unique address on the same subnet to which the network interface connects.

[S]: Set local subnet mask.

Enter local subnet mask [255.255.252.0]:

[G]: Set local gateway.

The local gateway IP address is needed if the TFTP server is on a different subnet than the one to which the FortiGate unit is connected.

TFTP and filename

[T]: Set remote TFTP server IP address.

Enter remote TFTP server IP address [192.168.1.145]:

[F]: Set firmware file name.

Enter firmware file name [image.out]:

Enter [Q] to return to the main menu.

Initiating TFTP firmware transfer

Starting from the main BIOS menu

[T]: Initiate TFTP firmware transfer.

Please connect TFTP server to Ethernet port 'WAN1'.

MAC: 00:09:0f:b5:55:28

Connect to tftp server 192.168.1.145 ...

##########################################################

Image Received.

Checking image... OK

Save as Default firmware/Backup firmware/Run image without

saving:[D/B/R]?

After you choose any option, the FortiGate unit reboots. If you choose [D] or [B], there is first a pause while the firmware is copied:

Programming the boot device now.

................................................................

................................................................