Firmware upgrade of stacked or tiered FortiSwitch units
In this topology, the core FortiSwitch units are model FS-224E, and the access FortiSwitch units are model FS-108F-FPOE. Because the switches are stacked or tiered, the procedure to update the firmware is simpler. The FortiGate unit is running FortiOS 6.2.2 GA. In the following procedure, the four FortiSwitch units are upgraded from 6.2.1 to 6.2.2.
To upgrade the firmware of stacked or tiered FortiSwitch units:
-
Check that all of the FortiSwitch units are connected and which firmware versions they are running. For example:
FGT81ETK19001274 # execute switch-controller get-conn-status Managed-devices in current vdom root: STACK-NAME: FortiSwitch-Stack-flink SWITCH-ID VERSION STATUS FLAG ADDRESS JOIN-TIME NAME S108FF5918003577 v6.2.1 (176) Authorized/Up - 10.105.22.6 Thu Oct 24 10:47:27 2019 - S108FP5918008265 v6.2.1 (176) Authorized/Up - 10.105.22.5 Thu Oct 24 10:47:20 2019 - S224ENTF18001408 v6.2.1 (176) Authorized/Up - 10.105.22.2 Thu Oct 24 10:44:36 2019 - S224ENTF18001432 v6.2.1 (176) Authorized/Up - 10.105.22.3 Thu Oct 24 10:44:49 2019 - Flags: C=config sync, U=upgrading, S=staged, D=delayed reboot pending, E=configuration sync error Managed-Switches: 4 (UP: 4 DOWN: 0)
-
(Optional) To speed up how fast the image is pushed from the FortiGate unit to the FortiSwitch units, enable the HTTPS image push instead of the CAPWAP image push. For example:
FGT81ETK19001274 # config switch-controller global FGT81ETK19001274 (global) # set https-image-push enable FGT81ETK19001274 (global) # end
-
Download the file for the FortiSwitchOS 6.2.2 GA build 194 in the FortiGate unit. For example:
FGT81ETK19001274 # execute switch-controller switch-software upload tftp FSW_224E-v6-build0194-FORTINET.out 10.105.16.15 Downloading file FSW_224E-v6-build0194-FORTINET.out from tftp server 10.105.16.15... ######################### Image checking ... Image MD5 calculating ... Image Saving S224EN-IMG.swtp ... Successful! File Syncing... FGT81ETK19001274 # execute switch-controller switch-software upload tftp FSW_108F_POE-v6-build0194-FORTINET.out 10.105.16.15 Downloading file FSW_108F_POE-v6-build0194-FORTINET.out from tftp server 10.105.16.15... ################## Image checking ... Image MD5 calculating ... Image Saving S108FP-IMG.swtp ... Successful! File Syncing... FGT81ETK19001274 # execute switch-controller switch-software upload tftp FSW_108F_FPOE-v6-build0194-FORTINET.out 10.105.16.15 Downloading file FSW_108F_FPOE-v6-build0194-FORTINET.out from tftp server 10.105.16.15... ################## Image checking ... Image MD5 calculating ... Image Saving S108FF-IMG.swtp ... Successful! File Syncing... FGT81ETK19001274 #
- Check the downloaded FortiSwitch image. For example:
FGT81ETK19001274 # execute switch-controller switch-software list-available ImageName ImageSize(B) ImageInfo Uploaded Time S108FF-IMG.swtp 19574769 S108FF-v6.2-build194 Thu Oct 24 13:03:51 2019 S108FP-IMG.swtp 19583362 S108FP-v6.2-build194 Thu Oct 24 13:03:23 2019 S224EN-IMG.swtp 27159659 S224EN-v6.2-build194 Thu Oct 24 13:03:02 2019 FGT81ETK19001274 #
- Start the image staging. For example:
FGT81ETK19001274 # execute switch-controller switch-software stage all S224EN-IMG.swtp Staged Image Version S224EN-v6.2-build194 Image staging operation is started for FortiSwitch S224ENTF18001408 ... Image staging operation is started for FortiSwitch S224ENTF18001432 ... FGT81ETK19001274 # execute switch-controller switch-software stage all S108FF-IMG.swtp Staged Image Version S108FF-v6.2-build194 Image staging operation is started for FortiSwitch S108FF5918003577 ... FGT81ETK19001274 # execute switch-controller switch-software stage all S108FP-IMG.swtp Staged Image Version S108FP-v6.2-build194 Image staging operation is started for FortiSwitch S108FP5918008265 ...
- Check the status of the image staging. The Status column reports (from left to right) the percentage of the new firmware downloaded, the percentage of data erased to make space in the switchʼs local storage, and the percentage of the new firmware saved to the switchʼs local storage. For example:
FGT81ETK19001274 # execute switch-controller get-upgrade-status Device Running-version Status Next-boot ======================================================================================== VDOM : root S224ENTF18001408 S224EN-v6.2.1-build176,190620 (GA) (100/0/0) S224EN-v6.2-build176 (Staging) S224ENTF18001432 S224EN-v6.2.1-build176,190620 (GA) (100/0/0) S224EN-v6.2-build176 (Staging) S108FP5918008265 S108FP-v6.2.1-build176,190620 (GA) (18/0/0) S108FP-v6.2-build176 (Staging) S108FF5918003577 S108FF-v6.2.1-build176,190620 (GA) (25/0/0) S108FF-v6.2-build176 (Staging)
- Verify that the image staging has completed. For example:
FGT81ETK19001274 # execute switch-controller get-upgrade-status Device Running-version Status Next-boot ======================================================================================== VDOM : root S224ENTF18001408 S224EN-v6.2.1-build176,190620 (GA) (0/100/100) S224EN-v6.2-build194 (Idle) S224ENTF18001432 S224EN-v6.2.1-build176,190620 (GA) (0/100/100) S224EN-v6.2-build194 (Idle) S108FP5918008265 S108FP-v6.2.1-build176,190620 (GA) (0/100/100) S108FP-v6.2-build194 (Idle) S108FF5918003577 S108FF-v6.2.1-build176,190620 (GA) (0/100/100) S108FF-v6.2-build194 (Idle)
- Reboot all switches (or reboot the switches by group). For example:
FGT81ETK19001274 # execute switch-controller switch-action restart delay all Delayed restart operation is requested for FortiSwitch S224ENTF18001408 ... Delayed restart operation is requested for FortiSwitch S224ENTF18001432 ... Delayed restart operation is requested for FortiSwitch S108FP5918008265 ... Delayed restart operation is requested for FortiSwitch S108FF5918003577 ...
- Check the status of the switch reboot. For example:
FGT81ETK19001274 # execute switch-controller switch-action restart delay all Delayed restart operation is requested for FortiSwitch S224ENTF18001408 ... Delayed restart operation is requested for FortiSwitch S224ENTF18001432 ... Delayed restart operation is requested for FortiSwitch S108FP5918008265 ... Delayed restart operation is requested for FortiSwitch S108FF5918003577 ... FGT81ETK19001274 # execute switch-controller get-upgrade-status Device Running-version Status Next-boot ======================================================================================== VDOM : root S224ENTF18001408 Prepping for delayed restart triggered ... please wait for switch to reboot in a moment S224ENTF18001432 Prepping for delayed restart triggered ... please wait for switch to reboot in a moment S108FP5918008265 Prepping for delayed restart triggered ... please wait for switch to reboot in a moment S108FF5918003577 Prepping for delayed restart triggered ... please wait for switch to reboot in a moment FGT81ETK19001274 # execute switch-controller get-conn-status Managed-devices in current vdom root: STACK-NAME: FortiSwitch-Stack-flink SWITCH-ID VERSION STATUS FLAG ADDRESS JOIN-TIME NAME S108FF5918003577 v6.2.1 () Authorized/Down D 0.0.0.0 N/A - S108FP5918008265 v6.2.1 () Authorized/Down D 0.0.0.0 N/A - S224ENTF18001408 v6.2.1 () Authorized/Down D 0.0.0.0 N/A - S224ENTF18001432 v6.2.1 () Authorized/Down D 0.0.0.0 N/A - Flags: C=config sync, U=upgrading, S=staged, D=delayed reboot pending, E=configuration sync error Managed-Switches: 4 (UP: 0 DOWN: 4) FGT81ETK19001274 #
- Wait for a while before checking that all switches are online. For example:
FGT81ETK19001274 # execute switch-controller get-upgrade-status Device Running-version Status Next-boot ======================================================================================== VDOM : root S224ENTF18001408 S224EN-v6.2.2-build194,191018 (GA) (0/100/100) S224EN-v6.2-build194 (Idle) S224ENTF18001432 S224EN-v6.2.2-build194,191018 (GA) (0/100/100) S224EN-v6.2-build194 (Idle) S108FP5918008265 S108FP-v6.2.2-build194,191018 (GA) (0/100/100) S108FP-v6.2-build194 (Idle) S108FF5918003577 S108FF-v6.2.2-build194,191018 (GA) (0/100/100) S108FF-v6.2-build194 (Idle) FGT81ETK19001274 # execute switch-controller get-conn-status Managed-devices in current vdom root: STACK-NAME: FortiSwitch-Stack-flink SWITCH-ID VERSION STATUS FLAG ADDRESS JOIN-TIME NAME S108FF5918003577 v6.2.2 (194) Authorized/Up - 10.105.22.6 Thu Oct 24 13:22:27 2019 - S108FP5918008265 v6.2.2 (194) Authorized/Up - 10.105.22.5 Thu Oct 24 13:22:41 2019 - S224ENTF18001408 v6.2.2 (194) Authorized/Up - 10.105.22.2 Thu Oct 24 13:20:11 2019 - S224ENTF18001432 v6.2.2 (194) Authorized/Up - 10.105.22.3 Thu Oct 24 13:19:58 2019 - Flags: C=config sync, U=upgrading, S=staged, D=delayed reboot pending, E=configuration sync error Managed-Switches: 4 (UP: 4 DOWN: 0) FGT81ETK19001274 #
config switch-controller global
append disable-discovery S012345678
unselect disable-discovery S1234567890
end