– In case the FortiGate firewall device encounters some problems during the boot process, especially errors in the partition containing the boot file (the image file is damaged, the device has had the boot partition blanked out). So in this article, I will show you how to quickly (but importantly and accurately) upload images (or overwrite) to your boot partition. FortiGate through the TFTP protocol, this is also one of the methods to ensure that the firmware after uploading will be completely clean.
The equipment required is in the article:
1. Laptop/PC with USB or Serial (RS-232) port and Ethernet network port.
2. Console cable and USB-To-Serial cable.
3. Network cable
4. FortiGate 60E device
Software needs to be installed:
1. Putty
2. TFTPD32/64
3. FortiOS Image File of FGT-60E (You can send a TAC request to FGT to receive this update if you cannot download it yourself)
I/ Configure Ethernet port on TFTP Server:
1. In Windows 10, click “Start > import Control Panel > select Control Panel”.
2. In the window “Network and Internet” >click “View network status and tasks“
3. Click “Change adapter settings“
4. Right click on the card “Ethernet Adapters” > click “Properties“
5. Click “Internet Protocol Version 4 (TCP/IPv4)” > “Properties“
6. In the window Internet Protocol Version 4 (TCP/IPv4) Propertiesyou choose the following settings:
7. Press “OK” to save the settings again
II/ Install on Tftpd64 software:
1. Run TFTPD software immediately. In “Server interfaces” select the Ethernet port with IP 192.168.1.100
2. Section “Current Directory” click “Browse” and select the path to the folder containing the image.
3. Go into the folder containing the image and change the image file name to “image.out“
4. Once renamed, on Tftpd64 > click “Show Dir” to check if the file name is correct
III/ Install on PuTTy software:
1. Check the console port used for the terminal in “Device Manager“
2. In the software, Putty select “Connection type” > “Serial” > in “Serial Line” set the COM port seen in the table “Device Manager”
3. Press “Open” to start configuring FortiGate using the serial port.
IV/ Connect FortiGate Firewall to TFTP Server:
1. Connect TFTP Server to WAN port 1 of FortiGate and Console port of FortiGate to serial/usb port of Laptop/PC.
2. Plug DC power into FortiGate
3. When starting up, when the information line appears “Please wait for OS to boot…” Press “Spacebar” on the keyboard.
4. When the list of options appears, click “Next.”R” to view TFTP boot settings on FortiGate.
!Note: These settings reflect the configuration we set on the TFTP Server earlier.
5. Click next “T” to initiate firmware download via TFTP
6. Signs “#” represents the firmware process that has been downloaded from the TFTP server
7. When finished uploading, press “D” to save the firmware to the default partition (Default partition). When the “.” Obviously, this is the state that the device has been successfully installed and booted.
8. After uploading the firmware > placing it in the default partition > restarting the device. Log in with your admin account as shown
9. Check the device again FortiGate firewall 60E has been updated with the command:
get system status
So, FortiGate saved and booted the image as desired by loading via TFTP successfully!
– Wishing you success-
Xem tiếp...