Restoring the previous configuration, Backup and restore from a usb key – Fortinet FortiGate 30B User Manual

Page 46

Advertising
background image

FortiGate-30B FortiOS 3.0 MR6 Install Guide

46

01-30006-0459-20080505

Installing firmware from a system reboot using the CLI

FortiGate Firmware

9

Type the address of the TFTP server and press Enter:

The following message appears:

Enter Local Address [192.168.1.188]:

10

Type an IP address the FortiGate unit can use to connect to the TFTP server. The
IP address can be any IP address that is valid for the network the interface is
connected to. Make sure you do not enter the IP address of another device on this
network.

The following message appears:

Enter File Name [image.out]:

11

Enter the firmware image filename and press Enter.

The TFTP server uploads the firmware image file to the FortiGate unit and a
message similar to the following appears:

Save as Default firmware/Backup firmware/Run image without
saving: [D/B/R]

12

Type D.
The FortiGate unit installs the new firmware image and restarts. The installation
might take a few minutes to complete.

Restoring the previous configuration

Change the internal interface address, if required. You can do this from the CLI
using the following command:

config system interface

edit <interface>

set ip <address_ip4mask>
set allowaccess {ping|https|ssh|telnet|http}

end

After changing the interface address, you can access the FortiGate unit from the
web-based manager and restore the configuration.

Backup and Restore from a USB key

Use a USB key to either backup a configuration file or restore a configuration file.
You should always make sure a USB key is properly install before proceeding
since the FortiGate unit must recognize that the key is installed in its USB port.

To backup configuration using the CLI

1

Log into the CLI.

2

Enter the following command to backup the configuration files:

exec backup config usb <filename>

3

Enter the following command to check the configuration files are on the key:

exec usb-disk list

Note: You can only save VPN certificates if you encrypt the file. Make sure the
configuration encryption is enabled so you can save the VPN certificates with the
configuration file. An encrypted file is ineffective if selected for the USB Auto-Install feature.

Advertising