飞塔防火墙使用TFTP更新固件

TFTP更新固件会恢复防火墙为默认配置，操作之前先进行配置备份

1. 重启防火墙，在启动时按照提示按任意键进入配置菜单

2. 选择C，设置TFTP客户端配置

Please wait for OS to boot, or press any key to display configuration menu.....

[C]: Configure TFTP parameters.
[R]: Review TFTP parameters.
[T]: Initiate TFTP firmware transfer.
[F]: Format boot device.
[I]: System information.
[B]: Boot with backup firmware and set as default.
[Q]: Quit menu and continue to boot.
[H]: Display this list of options.

Enter C,R,T,F,I,B,Q,or H:

3. 选择I，设置TFTP客户端IP，完成后按Q，返回上一级菜单

[P]: Set firmware download port.
[D]: Set DHCP mode.
[I]: Set local IP address.
[S]: Set local subnet mask.
[G]: Set local gateway.
[V]: Set local VLAN ID.
[T]: Set remote TFTP server IP address.
[F]: Set firmware file name.
[E]: Reset TFTP parameters to factory defaults.
[R]: Review TFTP parameters.
[N]: Diagnose networking(ping).
[Q]: Quit this menu.
[H]: Display this list of options.

Enter P,D,I,S,G,V,T,F,E,R,N,Q,or H:

4. 选择R，查看TFTP客户端配置，发现TFTP需要连接WAN1，固件名称需要是image.out

Image download port:    WAN1
DHCP status:            Disabled
Local VLAN ID:          <NULL>
Local IP address:       192.168.1.1
Local subnet mask:      <NULL>
Local gateway:          <NULL>
TFTP server IP address: 192.168.1.100
Firmware file name:     image.out

5. 选择T，从TFTP下载固件
下载完成后根据提示按D，将下载的固件设置为默认启动固件(Save as Default firmware)

FortiGate-60E (18:03-01.27.2017)
Ver:05000012
Serial number: FGT60E**********
CPU: 1000MHz
Total RAM: 2 GB
Initializing boot device...
Initializing MAC... nplite#0
Please wait for OS to boot, or press any key to display configuration menu...

[C]: Configure TFTP parameters.
[R]: Review TFTP parameters.
[T]: Initiate TFTP firmware transfer.
[F]: Format boot device.
[I]: System information.
[B]: Boot with backup firmware and set as default.
[Q]: Quit menu and continue to boot.
[H]: Display this list of options.

Enter C,R,T,F,I,B,Q,or H:

Please connect TFTP server to Ethernet port 'WAN1'.

MAC: 70:4c:a5:81:8d:b4

Connect to tftp server 192.168.1.100 ...


T T T T T T T T T T T T T T T T T T T T
Retry count exceeded; starting again
MAC: 70:4c:a5:81:8d:b4

Connect to tftp server 192.168.1.100 ...


T T T T T T T T T T T T T T T ############################################################################################################################################################
Image Received.
Checking image... OK
Uncompressed size: 268435968 = 0x10000200
Save as Default firmware/Backup firmware/Run image without saving:[D/B/R]?D

Programming the boot device now.
..

Booting OS...
Reading boot image... 2921549 bytes.
Initializing firewall...

System is starting...
Starting system maintenance...
Scanning /dev/mmcblk0p1... (100%)
Scanning /dev/mmcblk0p3... (100%)


FortiGate-60E login: