Installing alternate firmware
You can install alternate firmware which can be loaded from its separate partition if the primary firmware fails. This can be accomplished via the CLI.
To install alternate firmware via the CLI
1. Download the firmware file from the Fortinet Technical Support web site:
2. Copy the new firmware image file to the root directory of the TFTP server.
3. Connect your management computer to the FortiRecorder console port using a RJ-45-to-DB-9 serial cable or a null-modem cable.
4. Connect port1 of the FortiRecorder appliance directly or to the same subnet as a TFTP server.
5. Initiate a connection from your management computer to the CLI of the FortiRecorder appliance, and log in as the admin administrator.
6. If necessary, start your TFTP server. (If you do not have one, you can temporarily install and run one such as
tftpd (
Windows,
Mac OS X, or
Linux) on your management computer.)
| Because TFTP is not secure, and because it does not support authentication and could allow anyone to have read and write access, you should only run it on trusted administrator-only networks, never on computers directly connected to the Internet. If possible, immediately turn off tftpd off when you are done. |
7. Verify that the TFTP server is currently running, and that the FortiRecorder appliance can reach the TFTP server.
To use the FortiRecorder CLI to verify connectivity, enter the following command:
execute ping 192.168.1.168
where 192.168.1.168 is the IP address of the TFTP server.
8. Enter the following command to restart the FortiRecorder appliance:
execute reboot
9. As the FortiRecorder appliances starts, a series of system startup messages appear.
Press any key to display configuration menu........
10. Immediately press a key to interrupt the system startup.
| You have only 3 seconds to press a key. If you do not press a key soon enough, the FortiRecorder appliance reboots and you must log in and repeat the execute reboot command. |
If you successfully interrupt the startup process, the following messages appears:
[G]: Get firmware image from TFTP server.
[F]: Format boot device.
[B]: Boot with backup firmware and set as default.
[Q]: Quit menu and continue to boot with default firmware.
[H]: Display this list of options.
Enter G,F,B,Q,or H:
Please connect TFTP server to Ethernet port "1".
11. Type G to get the firmware image from the TFTP server.
The following message appears:
Enter TFTP server address [192.168.1.168]:
12. Type the IP address of the TFTP server and press Enter.
The following message appears:
Enter local address [192.168.1.188]:
13. Type a temporary IP address that can be used by the FortiRecorder appliance to connect to the TFTP server.
The following message appears:
Enter firmware image file name [image.out]:
14. Type the firmware image file name and press Enter.
The FortiRecorder appliance downloads the firmware image file from the TFTP server and displays a message similar to the following:
Save as Default firmware/Backup firmware/Run image without saving:[D/B/R]?
15. Type B.
The FortiRecorder appliance saves the backup firmware image and restarts. When the FortiRecorder appliance reboots, it is running the primary firmware.
See also