Start Troubleshooting Map Basic Tests Hardware Tests Format Hard Disk Reload Image Test compact flash Knowledge Base Service Contract 8*5 and 24*7 Service Contract 24*7*4 (TPM) RMA Approval Forticare Tickets


FortiGate Hardware System Advanced Test Guide

If you don't feel comfortable to run the following test please, Contact your distributor

HQIP process

    1.DOWNLOAD HQIP image according to product
    2.Reboot the Unit
    3.Interrupt the boot sequence
    4.LOAD advanced hardware test image
    Loading FortiGate firmware using TFTP
    5.Wire the network ports as indicated bellow for NIC loopback test.
    6.Run without saving
     7.Save console output


CAUTION:

  • On very old hardware revision, HQIP may destroy the data on the boot device.

  • For all the FortiAnalyzer and FortiMail with RAID card (FLG2000, FE2000, FA2000A, FE2000A, FA4000A and FE4000A),
    when we conduct HQIP test, test set the RAID level to 0 so that HQIP can test each hard disk.
    Once you finish the HQIP test, you have to format the HDD that can set the RAID level back to the default level for each model.

    1) Get the HQIP Image :

    (updated 10/28/2008)
    Model HQIP Image S/N coverage
    FortiGate 30B FortiGate-30B_HQIP_082.img FGT30B3G080XXXXX
    FortiWifi 30B FortiWiFi-30B_HQIP_7402.img FWF30B3G090XXXXX
    FortiGate 50 FortiGate-50_HQIP_048.img FGT-50280302xxxxx , FGT-50280303xxxxx, FGT-5021042xxxxx
    FortiGate 50A version 1 FortiGate-50A_HQIP_043.img FGT50A210xxxxxxx, FGT50A29044xxxxx
    FortiGate 50A version 2 FortiGate-50A_HQIP_070.img FGT50A29054xxxxx, FGT50A29055xxxxx, FGT50A29065xxxxx, FGT50A39065xxxxx, FGT50A39075xxxxx
    FortiGate 50B version 1 FortiGate-50BCP5_HQIP_7403.img FGT50B3G065xxxxx, FGT50B3G075xxxxx
    FortiGate 50B version 2 FortiGate-50B_HQIP_7404.img FGT50B3G076xxxxx, FGT50B3G086xxxxx, FGT50B3G096xxxxx
    FortiGate 50B HD FortiGate50BHD_HQIP_7401.img FG50BH3G0xxxxxxx
    FortiWifi 50B version 1 FortiWiFi-50B_HQIP_072.img FWF50B3G065xxxxx, FWF50B3G075xxxxx, FWF50B34075xxxxx
    FortiWifi 50B version 2 FortiWiFi-50B_HQIP_074.img FGT50B3G076xxxxx, FGT50B3G086xxxxx
    FortiGate 60 FortiGate-60_HQIP_070.img FGT-6028030xxxxx, FGT-6021032xxxxx, FGT-6021044xxxxx, FGT-6029044xxxxx, FGT-6029054xxxxx, FGT-6029055xxxxx, FGT-6029065xxxxx, FGT-6039065xxxxx, FGT-6039075xxxxx
    FortiGate 60B version 1 FortiGate-60B_HQIP_7401.img FGT60B39075xxxxx
    FortiGate 60B version 2 FortiGate-60B_HQIP_7403.img FGT60B39076xxxxx, FGT60B39086xxxxx, FGT60B39096xxxxx
    FortiGate 60M version 1 FortiGate-60M_HQIP_032.img FGT60M29044xxxxx, FGT60M29054xxxxx
    FortiGate 60M version 2 FortiGate-60M_HQIP_071.img FGT60M29055xxxxx, FGT60M29065xxxxx
    FortiGate 60 ADSL FortiGate-60ADSL_HQIP_071.img F60DSL29065xxxxx, F60DSL39065xxxxx
    FortiWifi 60 FortiWifi-60_HQIP_046.img FWF-6021044xxxxx
    FortiWifi 60A FortiWifi-60A_HQIP_071.img FWF60A29055xxxxx, FWF60A29065xxxxx, FWF60A39065xxxxx
    FortiWifi 60AM version 1 FortiWifi-60M_HQIP_062.img FWF60M29044xxxxx, FWF60A29055xxxxx
    FortiWifi 60AM version 2 FortiWifi-60M_HQIP_073.img FWF60M29065xxxxx
    FortiWifi 60B version 1 FortiWifi-60B_HQIP_7401.img FWF60B39075xxxxxx
    FortiWifi 60B version 2 FortiWifi-60B_HQIP_7403.img FWF60B39076xxxxxx, FWF60B39086xxxxxx
    FortiGate 80C FortiGate-80C_HQIP_7405.img FGT80C390xxxxxxx
    FortiGate 80C USB FortiGate-80C_USB_HQIP_7402.img FGT80C390xxxxxxx
    FortiGate 80CM FortiGate-80CM_HQIP_7405.img FG80CM390xxxxxxx
    FortiGate 80CM USB FortiGate-80CM_USB_HQIP_7402.img FG80CM390xxxxxxx
    FortiGate 82C FortiGate-82C_HQIP_7402.img FGT82C310xxxxxxx
    FortiWifi 80CM FortiWifi-80CM_HQIP_7405.img FW80CM390xxxxxxx
    FortiWifi 80CM USB FortiWifi-80CM_USB_HQIP_7402.img FW80CM390xxxxxxx
    FortiWifi 81CM FortiWifi-81CM_HQIP_7413.img FW81CM390xxxxxxx
    FortiGate 100 version 1 FortiGate-100_HQIP_30.img FGT1002801xxxxxx, FGT1002802xxxxxx
    FortiGate 100 version 2 FortiGate-100_HQIP_043.img FGT1002803xxxxxx, FGT1002104xxxxxx, FGT1002106xxxxxx
    FortiGate 100A version 1 FortiGate-100A_HQIP_043.img FG100A21044xxxxx, FG100A21054xxxxx, FG100A21064xxxxx
    FortiGate 100A version 2 FortiGate-100A_HQIP_059.img FG100A29054xxxxx, FG100A29055xxxxx, FG100A29065xxxxx, FG100A39065xxxxx, FG100A39075xxxxx
    FortiGate 110C FortiGate-110C_HQIP_7401.img FG100C3G0860xxxx
    FortiGate 110C FortiGate-110C_HQIP_7412.img FG100C3G0960xxxx
    FortiGate 110C-HD FortiGate-110CHD_HQIP_7401.img FG10CH3G0860xxxx
    FortiGate 111C FortiGate-110C_HQIP_7421.img FG10CH3G0960xxxx
    FortiGate 200 FortiGate-200_HQIP_047.img FGT200280302xxxx, FGT200280303xxxx, FGT2002A0420xxxx, FGT200240420xxxx, FGT200240520xxxx, FGT200240620xxxx
    FortiGate 200A version 1 FortiGate-200A_HQIP_043.img FG200A210440xxxx, FG200A210540xxxx, FG200A210640xxxx
    FortiGate 200A version 2 FortiGate-200A_HQIP_061.img FG200A290550xxxx, FG200A290650xxxx, FG200A390650xxxx, FG200A390750xxxx, FG200A390850xxxx
    FortiGate 200A HD version 1 FortiGate-200A-HD_HQIP_043.img FG200A210445xxxx, FG200A210545xxxx
    FortiGate 200A HD version 2 FortiGate-200A-HD_HQIP_061.img FG200A290555xxxx, FG200A290655xxxx, FG200A390655xxxx, FG200A390755xxxx
    FortiGate 224B FortiGate-224B_HQIP_072.img FG224B29065xxxxx, FG224B39065xxxxx
    FortiGate 300 FortiGate-300_HQIP_043.img APS301280302xxxx, APS301280303xxxx, APS301240420xxxx
    FortiGate 300A FortiGate-300A_HQIP_043.img FG300A290450xxxx, FG300A290550xxxx, FG300A390650xxxx, FG300A390750xxxx, FG300A39085xxxxx
    FortiGate 300A HD FortiGate-300A-HD_HQIP_043.img FG300A290455xxxx, FG300A290555xxxx, FG300A390655xxxx, FG300A390755xxxx, FG300A390855xxxx
    FortiGate 310B FortiGate-310B_HQIP_7402.img FG300B39076xxxxx, FG300B39086xxxxx
    FortiGate 310B set up with AMC FB4 Module FortiGate-310B-AMCFB4_HQIP_7403.img FG300B39076xxxxx, FG300B39086xxxxx with AMC FB4 Module
    FortiGate 310B set up with AMC HD Module FortiGate-310B-AMCHD_HQIP_7402.img FG300B39076xxxxx, FG300B39086xxxxx with AMC HD Module
    FortiGate 311B FortiGate-311B_HQIP_5103.img FG311B390xxxxxxx,
    FortiGate 400 FortiGate-420_HQIP_043.img FGT400280303xxxx, FGT400240420xxxx
    FortiGate 400A version 1 FortiGate-400A_HQIP_1000.img FG400A290450xxxx, FG400A290550xxxx, FG400A390650xxxx, FG400A390750xxxx
    FortiGate 400A version 2 FortiGate-400A_HQIP_074.img FG400A390850xxxx
    FortiGate 400A HD version 1 FortiGate-400A-HD_HQIP_1000.img FG400A290455xxxx, FG400A290555xxxx, FG400A390655xxxx, FG400A390755xxxx
    FortiGate 400A HD version 2 FortiGate-400A-HD_HQIP_074.img FG400A390855xxxx
    FortiGate 500 FortiGate-520_HQIP_043.img FGT500280303xxxx, FGT500240420xxxx
    FortiGate 500A version 1 FortiGate-500A_HQIP_1000.img FG500A290450xxxx, FG500A290550xxxx, FG500A290650xxxx, FG500A390650xxxx, FG500A390750xxxx, FG500A3908500001-500
    FortiGate 500A version 2 FortiGate-500A_HQIP_074.img FG500A3908500501-FG500A390850xxxx
    FortiGate 500A HD version 1 FortiGate-500A-HD_HQIP_1000.img FG500A290455xxxx, FG500A290555xxxx, FG500A390655xxxx, FG500A290655xxxx, FG500A390755xxxx, FG500A3908550001-500
    FortiGate 500A HD version 2 FortiGate-500A-HD_HQIP_074.img FG500A3908550501-FG500A390855xxxx
    FortiGate 620B FortiGate-620B_HQIP_7402.img FG600B39086xxxxx, FG600B39096xxxxx
    FortiGate 620B set up with AMC FB4 Module FortiGate-620B-AMCFB4_HQIP_7402.img FG600B39086xxxxx, FG600B39096xxxxx
    FortiGate 620B set up with AMC HD Module FortiGate-620B-AMCHD_HQIP_7402.img FG600B39086xxxxx, FG600B39096xxxxx
    FortiGate 800 version 1 FortiGate-800_HQIP_068.img FGT800280503xxxx, FGT800260440xxxx, FGT800260550xxxx, FGT800260650xxxx, FGT800360650xxxx
    FortiGate 800 version 2 FortiGate-800_HQIP_7404.img FGT800360750xxxx, FGT8003H0750xxxx, FGT800360850xxxx
    FortiGate 800F version 1 FortiGate-800_HQIP_068.img FG800F26044xxxxx, FG800F26055xxxxx, FG800F26065xxxxx, FG800F36065xxxxx
    FortiGate 800F version 2 FortiGate-800_HQIP_7404.img FG800F360750xxxx, FG800F360850xxxx
    FortiGate 1000 FortiGate-1000_HQIP_046.img FGT-1K280303xxxx
    FortiGate 1000A FortiGate-1000A_HQIP_073.img FGT1KAx60x50xxxx
    FortiGate 1000A FA2 FortiGate-1000AFA2_HQIP_073.img FGT1KXx60x50xxxx
    FortiGate 1240B FortiGate-1240B_HQIP_7407.img FGT1KB39096xxxxx
    FortiGate 3000 FortiGate-3000_HQIP_054.img FG300028050xxxxx, FG30002x044xxxxx, FG30002D054xxxxx
    FortiGate 3016B FortiGate-3016B_HQIP_EEI_074.img FGT3KB34xxxxxxxx
    FortiGate 3016B set up with AMC FB4 Module FortiGate-3016B-AMCFB4_HQIP_EEI_074.img FGT3KB34xxxxxxxx
    FortiGate 3016B set up with AMC HD Module FortiGate-3016B-AMCHD_HQIP_EEI_074.img FGT3KB34xxxxxxxx
    FortiGate 3600 version 1 FortiGate-3620_HQIP_043.img FG360028050xxxxx, FG36002x044xxxxx, FG36002x054xxxxx, FG30002D064xxxxx
    FortiGate 3600 version 2 FortiGate-3600_HQIP_072.img FG36003407xxxxxx, FG36003D064xxxxxx
    FortiGate 3600A FortiGate-3600A_HQIP_073.img FG3K6A340660xxxx, FG3K6A340760xxxx
    FortiGate 3810A FortiGate-3800A_HQIP_073.img set up without any AMC modules
    FortiGate 3810A set up with ADM XB2 Modul FortiGate-3800A_HQIP_BASE_2XB2_1008.img set up with XB2 modules. You can test FG3810A only,with one XB2(ADM1) or two XB2(ADM1/ADM2)
    FortiGate 3810A set up with ASM FB4 Modul FortiGate-3800A-AMC_ONLY_HQIP_073.img set up with 2 ASM FB4 modules. You can test FG3810A with one ASM-FB4 (ASM1) or 2 ASM FB4 (ASM1/ASM2)
    If you only have one module you may expect some error from missing AMC cards
    FortiGate 3810A set up with ASM HD Modul FortiGate-3800A-HD_HQIP_073.img set up with 2 ASM HD modules. You can test FG3810A with one ASM-HD (ASM1) or 2 ASM HD (ASM1/ASM2)
    If you only have one module you may expect some error from missing AMC cards
    FortiGate 3810A set up with AMC FB4 and ADM XB2 Modul FortiGate-3800A-FB4_XB2_HQIP_073.img set up FB4 / XB2 modules. If you only have one module you may expect some error from missing AMC cards
    Fortigate 3810A set up with AMC HD - AMC FB4 - ADM XB2 Module FortiGate-3800A-HD_FB4_XB2_HQIP_073.img set up with FB4 / XB2 and hard disk modules. If you only have one module you may expect some error from missing AMC cards
    Fortigate 3810A set up with AMC FB8 Module FortiGate-3800A-FB4_FB8_HQIP_074.img This HQIP requires a FG3810A + 2x FB4 + 2x FB8. If you only have one FB8 you may expect some error from missing AMC cards.
    Fortigate 3810A set up 2 modules XB2 FortiGate-3800A_HQIP_BASE_2XB2_1008.img This HQIP requires a FG3810A + 2x XB2. If you only have one XB2 you may expect some error from missing AMC cards.
    FortiGate 3810A set up with AMC XE2 Module FortiGate-3800A-AMC_XE2_HQIP_1000.img set up with XE2. You can test FG3810A only,with one XB2(ADM1) or two XB2(ADM1/ADM2).
    Fortigate 5001 SX FortiGate-5000_HQIP_073.img FG5001220440xxxx, FG5001220540xxxx, FG5001220640xxxx
    Fortigate 5001 SX FortiGate-5000_HQIP_074.img FG5001320740xxxx
    Fortigate 5001 FA2 version 1 FortiGate-5001FA2_HQIP_1000.img FG502A220540xxxx, FG502A220640xxxx
    Fortigate 5001 FA2 version 2 FortiGate-5001FA2_HQIP_074.img FG502A3207400001-50
    Fortigate 5001A FortiGate-5001A_HQIP_7402.img FG5A013E0xxxxxxx, FG5A023E0xxxxxxx
    Fortigate 5001A set up with ADM XB2 Module FortiGate-5001A_XB2_HQIP_1000.img FG5A013E0xxxxxxx, FG5A023E0xxxxxx
    Fortigate 5001A set up with AMC FB8 Module FortiGate-5001A_FB8_HQIP_1000.img FG5A013E0xxxxxxx, FG5A023E0xxxxxxx
    Fortigate 5001A set up with ADM RXB2 Module FortiGate-5001A_RXB2_HQIP_7403.img FG5A013E0xxxxxxx, FG5A023E0xxxxxxx
    Fortigate 5001A set up with AMC FB4 Module FortiGate-5001A_FB4_HQIP_7401.img FG5A013E0xxxxxxx, FG5A023E0xxxxxxx
    FortiGate 5005 FA2 version 1 FortiGate-5005FA2_HQIP_068.img FG5A253E0650xxxx
    FortiGate 5005 FA2 version 2 FortiGate-5005FA2_HQIP_072.img FG5A253E0660xxxx, FG5A253E0760xxxx


    FortiAnalyzer 100A FortiLog-100A_HQIP_053.img FL100A210500xxxx, FL100A210600xxxx, FL100A210700xxxx, FL100A310600xxxx, FL100A310700xxxx
    FortiAnalyzer 100B FortiLog-100B_HQIP_068.img FL100B310600xxxx, FL100B310700xxxx, FL100B310800xxxx, FL100B310900xxxx
    FortiAnalyzer 100C FortiAnalyzer-100C_HQIP_7406.img FL100C390960xxxx
    FortiAnalyzer 400B FortiAnalyzer-400B_HQIP_1006.img FL400B3M0xxxxxxx
    FortiAnalyzer 400B with 2 HDD FortiAnalyzer-400B_HQIP_7401.img FL400B3M0xxxxxxx
    FortiAnalyzer 800 FortiLog-800_HQIP_1000.img model with HD-250GB FLG800270xxxxxxx
    FortiAnalyzer 800B FortiLog-800B_HQIP_074.img FL800B390xxxxxxx
    FortiAnalyzer 1000B FortiLog-1000B_HQIP_7602.img FL-1kb3R08xxxxxx, FL-1kb3R09xxxxxx
    FortiAnalyzer 2000 FortiLog-2000_HQIP_066.img FLG-2K240500xxxx, FLG-2K240600xxxx
    FortiAnalyzer 2000A version 1 FortiLog-2000_HQIP_071.img FLG-2K3F0600xxxx, FLG-2K3F0700xxxx, FLG-2K3F08000001-100
    FortiAnalyzer 2000A version 2 FortiLog-2000_HQIP_074.img FLG-2K3F08000101-xxx
    FortiAnalyzer 4000 FortiLog-4000_HQIP_071.img FLG-4K3F0600xxxx
    FortiAnalyzer 4000A FortiLog-4000_HQIP_071.img FLG-4K3F0600xxxx


    FortiManager 100 FortiManager-100_HQIP_072.img FMG10031070xxxxx
    FortiManager 400A FortiManager-400A_HQIP_054.img FMG40A290550xxxx, FMG40A290650xxxx, FMG40A390650xxxx
    FortiManager 400B FortiManager-400B_HQIP_1006.img FM400B3M0xxxxxxx
    FortiManager 3000 version 1 FortiManager-3000_HQIP_064.img FMG-3K240640xxxx
    FortiManager 3000 version 2 FortiManager-3000_HQIP_067.img FMG-3K340640xxxx, FMG-3K340740xxxx
    FortiManager 3000B FortiManager-3000B_HQIP_1000.img FMG3KB3F070xxxx, FMG3KB3F080xxxx


    FortiMail 100 FortiMail-100_HQIP_068.img FE-100310600xxxx, FE-100310609xxxx, FE-10031070xxxxx
    FortiMail 400 version 1 FortiMail-400_HQIP_1000.img FE-400290550xxxx, FE-400390650xxxx, FE-4003907500001-320, FE-4003907500321-xxx, FE-4003N075xxxxx
    FortiMail 400 version 2 FortiMail-400_HQIP_073.img FE-40039085xxxxx
    FortiMail 400B FortiMail-400B_HQIP_1006.img FE400B3M09xxxxxx
    FortiMail 2000 FortiMail-2000_HQIP_066.img FE200024050xxxx, FE200024060xxxx
    FortiMail 2000A version 1 FortiMail-2000A_HQIP_071.img FE-2KA3F0600xxxx, FE-2KA3F0700xxxx
    FortiMail 2000A version 2 FortiMail-2000A_HQIP_074.img FE-2KA3F0800xxxx
    FortiMail 4000 FortiMail-4000_HQIP_071.img FE-400290550xxxx, FE-400390650xxxx
    FortiMail 4000A FortiMail-4000_HQIP_071.img FE40003F0600xxxx


    FortiDB 400B FortiDB-400B_HQIP_1003.img FD400B3M0xxxxxxx
    Checksum
    Verify integrity of HQIP image with checksum file Checksum HQIP image All models 

    	Pre-requisite :

    
	- plan this operation as a traffic outage is needed
	- In case you want to reload a previously backed-up configuration file:
		make sure it matches the firmware version that will be installed.
		If there is a chance the configuration file is corrupted, don't use it and reconfigure the Fortigate from scratch.
	- Eventually, make screenshots of your Fortigate configuration in case you need to rebuild it from scratch.

    2) Load HQIP image
    • Power off the FGT unit and use the following :
      • Terminal client (windows hyperterminal, linux minicom...)
        • Speed 9600 8 bits, no parity, 1 stop for all FGT , except FGT 300: 115000-8-n-1
        • Speed 115000 8 bits, no parity, 1 stop for all FMG
        • ASCII setup : Append line feeds to incoming lines
        • Log messages to file
      • Null modem serial cable (provided with the Fortigate)
      • Provide a fixed IP address to your PC eg: 192.168.1.168
      • tftp server running on a PC
        • SolarWinds TFTP server
      • Cross-over network cable to connect directly the Fortigate to the PC running the TFTP server
    • Connect your PC LAN interface using an eth cross cable to :
      • "Interface Internal", On models 50, 50A, 100, 200, 300, 500, 800, 800F
      • "Interface Internal 1 ", On models 100A,200A, 300,
      • "LAN Interface port1", On models 300A, 400, 400A, 500A, 1000 and higher
      • "LAN2", On Fortilog 800
    • Power on the Fortigate Unit
    • Press any key at when "Press any key to display configuration menu..." message will be displayed
    • Enter G when appears:
      [G]: Get firmware image from TFTP server.
[F]: Format boot device.
[Q]: Quit menu and continue to boot with default firmware.
[H]: Display this list of options.

    • Enter the IP addresses and Image name
      • Enter tftp server address [192.168.1.168]: 192.168.1.168
      • Enter local address [192.168.1.188]: 192.168.1.188
      • Enter File Name [image.out]: HQIPimage.img
    • The Fortinet device interface MAC Address is displayed
    • The file transfer should be displayed on the TFTP server ( ensure image is located in the appropriate folder), along with a series of hash "#" characters.
    • When prompted with the choice to save as Default, save as Backup, or Run image without saving, Select "R" to run without saving
    1. Functional check: The HQIP (Hardware Quick Inspection Package) test image is used to check the unit’s system function and its interfaces. A console cable connection is required, and the entire console output must be logged to a file.
    • HQIP will check almost all components, including CPU, memory, CF, HD and PCI devices (NIC/ASIC). It will also check the critical benchmarks and system configurations.
    • Observe the console output to make sure there is no warning stop or error message(s) from the test.
    • For testing FG5000 and other models that having backbone ports, two blades have to be tested simultaneously because of the lack of loop back connection for the inner ports. Save HQIP to two blades and power on two blades at same time so that HQIP can test the inner ports with cross traffic.
    • If any errors or warning stops have occurred during this test, do not continue with the rest of steps 2 and go to Report.
    2. Factory default restore:
    • If all of the above tests were successful, Format the hard drive (if applicable)
    • Format the Flash (if possible) if the unit’s BootROM menu provides such an option (‘F’ for Format boot device)
    • Reload image public release firmware version.
    Notes:




USB loop back cable: A USB serial cable with 2-3 linked in its DB9 port.
AUX test kit: an RJ45-DB9 console cable with pin 2-3 connected on DB9 side.


Sample  CONSOLE MESSAGE

    3) REPORT
    • You Don't feel comfortable to run the above test Contact your distributor
    • Test didn't pass. Check service contract  prior updating ticket for RMA Request.
    • Test OK. Reload Firmware Image