Hot!Fortigate 100D - USB to Console

Author
dustwynn
New Member
  • Total Posts : 7
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/12/07 10:19:56
  • Status: offline
2018/12/07 10:27:38 (permalink)
0

Fortigate 100D - USB to Console

I need to do a clean install on a 100D firewall. I need to connect to it via CLI. I have a USB to RJ-45 cable and was wondering what program is best to use? Putty? Also, how do I figure out what COM port the USB is using? Would it be easier to use a crossover cable? Our network guy said it will not boot to web interface and has asked me to do this. 
 
Sorry for the noob question. It has been 10 years since I've connect to console on a device. Just looking for a little guidance. 
#1

12 Replies Related Threads

    Toshi Esumi
    Expert Member
    • Total Posts : 1355
    • Scores: 101
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/07 14:12:21 (permalink)
    5 (1)
    It's all about your PC side. It doesn't matter if it's FGT or any other routers or whatever you want to use the console port. Just calm down and think how it would work logically ;)
    First, you need to make your USB serial adapter work. It requires a driver (windows or mac). Then if it's windows the COM port number comes up under Port(COM&LPT) in Device Manager. If Mac you probably know it better than me.
    Then it doesn't matter what kind of terminal emulation software you use. Any of them should work just fine.
    #2
    dustwynn
    New Member
    • Total Posts : 7
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/12/07 10:19:56
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/10 12:37:31 (permalink)
    0
    toshiesumi
    It's all about your PC side. It doesn't matter if it's FGT or any other routers or whatever you want to use the console port. Just calm down and think how it would work logically ;)
    First, you need to make your USB serial adapter work. It requires a driver (windows or mac). Then if it's windows the COM port number comes up under Port(COM&LPT) in Device Manager. If Mac you probably know it better than me.
    Then it doesn't matter what kind of terminal emulation software you use. Any of them should work just fine.




    Thank you Toshiesumi! It popped right up in Device Manager like you said. Easy peasy.
    #3
    sw2090
    Gold Member
    • Total Posts : 255
    • Scores: 10
    • Reward points: 0
    • Joined: 2017/06/14 01:27:25
    • Location: Regensburg
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/10 23:14:38 (permalink)
    0
    and from then e.g. Putty will do the trick or any other terminal pogram that can do serial. Like windows hyperterminal etc etc.
     
    Connection settings btw are: 9600-8-N-1 and no flow controls.
    #4
    dustwynn
    New Member
    • Total Posts : 7
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/12/07 10:19:56
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/11 06:30:04 (permalink)
    0
    I got connected through Putty and now I am getting the "open boot device failed" error. I tried formatting and restoring from backup with no success. I am waiting on a co-worker to give me a copy of the firmware and I will try a clean install. Any suggestions on the error above?
    #5
    sw2090
    Gold Member
    • Total Posts : 255
    • Scores: 10
    • Reward points: 0
    • Joined: 2017/06/14 01:27:25
    • Location: Regensburg
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/11 06:36:19 (permalink)
    0
    ummm...if you formatted boot device you have eliminated your firmware with it. So you do need to get a firmware image and use tftp to upload to your FGT to make it boot again.
    Unfortunately Firmware images are available only in Fortinet Support Portal for which you need to have a registered account plus a valid Fortinet support contract.
    #6
    sw2090
    Gold Member
    • Total Posts : 255
    • Scores: 10
    • Reward points: 0
    • Joined: 2017/06/14 01:27:25
    • Location: Regensburg
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/11 06:38:26 (permalink)
    0
    should have re-read your last post before I answered :)
    if you have a colleague that can give you an image - good.
    once you have the firmware up and the fgt booting again you could try to restore your backup (if it was from the same firmware version at least).
    You cannot restore a backup without firmware.
    #7
    dustwynn
    New Member
    • Total Posts : 7
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/12/07 10:19:56
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/11 11:53:57 (permalink)
    0
    So I got a copy of the firmware today and have TFTP loaded and configured correctly. I am now getting "valid link is not established" after I input:
     
    Please connect TFTP server to Ethernet port 'MGT'.
    Enter TFTP server address [192.168.1.168]: 192.168.42.36 (TFTP Server Address)
    Enter local address [192.168.1.188]: 192.168.42.30 (Random IP Address)
    Enter firmware image file name [image.out]: image.out (Firmware File Name)
     
    I only have my laptop connect to the console port. What can I do to fix the error message? Local IP address would be for what?
    #8
    Seppel
    Silver Member
    • Total Posts : 84
    • Scores: 12
    • Reward points: 0
    • Joined: 2004/06/22 14:02:34
    • Location: Switzerland
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/11 12:33:09 (permalink)
    0
    you have to connect your notebook via serial interface on the fortigate console and a network cable from the notebook to the mgmt port of the fortigate, then that should work with tftp.another option would be to copy the image.out to the usb stick and install the firmware from the usb stick when booting. also the config can be on the same usb stick with the name fgt_system.conf.

    Fortigate 500E HA
    Fortimail 200
    Fortimanager
    FortiEMS
    FortiSandbox 1000D
    FortiSwitch Network
    Some other Models in use :-)
    ----------------------------------------------------
    FCSE
    ----------------------------------------------------
    #9
    sw2090
    Gold Member
    • Total Posts : 255
    • Scores: 10
    • Reward points: 0
    • Joined: 2017/06/14 01:27:25
    • Location: Regensburg
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/11 22:54:39 (permalink)
    0
    Siince I am atm not sure if the FGT runs a DHCP Server on MGMT Port in Bootloader you  might have to apply the correct network config to your Laptop also.
    #10
    dustwynn
    New Member
    • Total Posts : 7
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/12/07 10:19:56
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/12 07:01:44 (permalink)
    0
    Guys, I got it finally! Yesterday the only MGMT port is saw was the USB one. This morning I thought I'd give it one last shot and saw the ethernet MGMT under the DMZ port, then it all made sense. Feel like such a noob for missing that port.
     

    #11
    dustwynn
    New Member
    • Total Posts : 7
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/12/07 10:19:56
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/12 07:04:51 (permalink)
    0
    Now I am getting this. I think its shot.
     


     
    post edited by dustwynn - 2018/12/12 07:16:35
    #12
    Seppel
    Silver Member
    • Total Posts : 84
    • Scores: 12
    • Reward points: 0
    • Joined: 2004/06/22 14:02:34
    • Location: Switzerland
    • Status: offline
    Re: Fortigate 100D - USB to Console 2018/12/12 08:34:37 (permalink)
    0
    not good :-) please try this, look here
    https://forum.fortinet.com/tm.aspx?m=141769
     

    Fortigate 500E HA
    Fortimail 200
    Fortimanager
    FortiEMS
    FortiSandbox 1000D
    FortiSwitch Network
    Some other Models in use :-)
    ----------------------------------------------------
    FCSE
    ----------------------------------------------------
    #13
    Jump to:
    © 2019 APG vNext Commercial Version 5.5