Installing Firmware On An Fim Or Fpm Module From The Bios Using A Tftp Server - Fortinet FortiGate-7060E Handbook

Installing firmware on an FIM or FPM module from the BIOS using a TFTP server

in_sync=1 indicates that the configurations of the modules are synchronized.
diagnose sys confsync
status | grep in_sy
FIM04E3E16000080, Slave, uptime=177426.45, priority=2,
slot_id=1:2, idx=0, flag=0x0, in_sync=1
FIM10E3E16000063, Master, uptime=177415.38, priority=1,
slot_id=1:1, idx=1, flag=0x0, in_sync=1
If in_sync is not equal to 1 or if a module is missing in the command output you can try restarting the
modules in the chassis by entering execute reboot from any module CLI. If this does not solve the problem,
contact Fortinet support.
Installing firmware on an FIM or FPM module from the BIOS using a TFTP
server
Use the procedures in this section to install firmware on a FIM or FPM module from a TFTP server after
interrupting the boot up sequence from the BIOS.
You might want to use this procedure if you need to reset the configuration of a module to factory defaults by
installing firmware from a reboot. You can also use this procedure if you have formatted one or more FIM or
FPM modules from the BIOS by interrupting the boot process.
This procedure involves creating a connection between a TFTP server and one of the MGMT interfaces of one of
the FIM modules, using a chassis console port to connect to the CLI of the module that you are upgrading the
firmware for, rebooting this module, interrupting the boot from the console session, and installing the firmware.
This section includes two procedures, one for upgrading FIM modules and one for upgrading FPM modules. The
two procedures are very similar but a few details, most notably the local VLAN ID setting are different. If you need
to update both FIM and FPM modules, you should update the FIM modules first as the FPM modules can only
communicate with the TFTP server through FIM module interfaces.
Uploading firmware from a TFTP server to an FIM module
Use the following steps to upload firmware from a TFTP server to an FIM module. This procedure requires
Ethernet connectivity between the TFTP server and one of the FIM module's MGMT interfaces.
During this procedure, the FIM module will not be able to process traffic so, if possible, perform this procedure
when the network is not processing any traffic.
If you are operating an HA configuration, you should remove the chassis from the HA configuration before
performing this procedure.
1. Set up a TFTP server and copy the firmware file to be installed into the TFTP server default folder.
2. Set up your network to allow traffic between the TFTP server and one of the MGMT interfaces of the FIM module
to be updated.
If the MGMT interface you are using is one of the MGMT interfaces connected as a LAG to a switch you must
shutdown or disconnect all of the other connections in the LAG from the switch. This includes the MGMT
interfaces in the other FIM module.
3. Connect the console cable supplied with your chassis to the Console 1 port on your chassis front panel and to your
management computer's RS-232 console port.
4. Start a terminal emulation program on the management computer. Use these settings:
Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
41
Getting started with FortiGate-7000
FortiGate-7000
Fortinet Technologies Inc.