FortiGate TFTP KB ID 0001788

Problem

I know FortiGate prides itself on being able to do everything from the GUI, but if you can only get in at CLI and need to take a backup then you need to go old school. Recently I had an HA Pair of Fortis, the primary had broken and I could not get access to the GUI on the standby. My plan was to get a backup, blow both (virtual Firewalls) away, deploy two new ones, and restore the config.

What about Licenses? Licences are handled separately (to the config) on FortiGate

FortiGate TFTP (Back Up)

Obviously you will need an TFTP server setup, I use a mac so it’s not a problem for me, but when that’s not an option I still use 3cDaemon.The command you need is.

[box]

execute backup config tftp {Name-of-Backup} {IP-of-TFTP-Server}

[/box]

Above (in the 3xDaemon window) you can watch the backup file coming in.

FortiGate TFTP (Restore)

Very similar to above, (Warning: This will cause the firewall to reboot).

[box]

execute restore config tftp {Name-of-Backup} {IP-of-TFTP-Server}

[/box]

Once again above (in the 3xDaemon window) you can watch the backup file going out.

Related Articles, References, Credits, or External Links

NA