Fortinet Firewall 100 D TFTP image

when u update your fortinet  Firewall 100 D but  when you upate the newer version of Fortinet Version 5.4.6 when its update and its restart but the firewall not came back to its original position so its mean your firewall is not working anymore.So for this first try tftp image.

so first install tftp Software like tf32dn or Solar winds after that set ur Lan card ip but first watch what is the ip on the fortinet firewall set same ip and same subnet not set different class.

so when u go to Fortinet firewall 100 D restart it and press escape until a menu came like b,c,f,g,d,e,i,t,p,and H. so configuring ip press G and u eveyword has its own function. So first
watch the IP and then Set ur LAN ip with same class and subnet mostly on fortinet the ip  is
192.168.1.99 or 192.168.1.6.

When you set ur LAN ip then start Solarwinds tftp app u will see ur  ip click on File and then
configure and then server bindings. if ur ip is there then ok.

Note connect Rj45 cable with Mgmt port Else it will not work and other side with ur pc.

now go on Teram term or putty to upload ur Fortinet image . for Fortinet image go to
Support.fortinet.com there go on download and download image 5.4.4 and put in Tftp directory.
Now go on teraterm restart Firewall press Esc button now Press G and type tptp local address which is your System Lan ip 192.168.1.10 and then forinet ip 192.168.1.6 and then image name u want to upload of Fortinet.

there is trick when u download the image Rename it and replace it with image.out .
and press Entere u will see the image will upload when image finish access through ip 192.168.1.6
and then upload ur configuration. :P

Etherchannel Configuration & Troubleshooting

Cisco Etherchannel Overview and how it can be configured                            in Cisco Catalyst Switches 

Here lets go to congiure Etherchannel. First of all shutdown all Physical interfaces which u want put in Etherchannel

with shutdown command. 

like

#int range fa0/46-48

#shutdown

 

Now lets go to topology.

ITKESW01#interface range gigabitethernet 0/45-48
                   #shutdown
                  #switchport trunk Encapsulation Dot1q
                 #switchport mode Trunk
                #channel-protocol lacp
               #channel-group 1 mode active

keep it shutdown until you configure the other side switch etherchannel interface.
Note: keep one side channel group active and other side passive this is the best method to configure the etherchannel interface.

ITKESWO2#interface range gigabitethernet 0/1-4
               #shutdown
                  #switchport trunk Encapsulation Dot1q
                 #switchport mode Trunk
                #channel-protocol lacp
               #channel-group 1 mode Passive

now shutdown both interfaces

#int range gigabitethernet0/45-48
#no shutdown

#int range gigabitethernet 0/1-4
#no shutdown

now it will create Port channel

If you have third switch attached then same config but u will create new channel for them. Suppose we have third switch name  ITKESW03 and that switch is connected to  ITKESWO2 , interfaces 5 and 6, and 3 and 4.

ITKESWO2#interface range gigabitethernet 0/5-6
                   #shutdown
                  #switchport trunk Encapsulation Dot1q
                 #switchport mode Trunk
                #channel-protocol lacp
               #channel-group 2 mode Passive

ITKESW03##interface range gigabitethernet 0/3-4
                   #shutdown
                  #switchport trunk Encapsulation Dot1q
                 #switchport mode Trunk
                #channel-protocol lacp
               #channel-group 2 mode active

now no shutdown both Switch interfaces.

and if u want connect third witch to ITKESWO1 
ITKESWO1#interface range gigabitethernet 0/7-8
                   #shutdown
                  #switchport trunk Encapsulation Dot1q
                 #switchport mode Trunk
                #channel-protocol lacp
               #channel-group 2 mode Passive

ITKESWO3#int range gigabitethernet 0/7-8
                   #shutdown
                  #switchport trunk Encapsulation Dot1q
                 #switchport mode Trunk
                #channel-protocol lacp
               #channel-group 2 mode active

commands for Etherchannel
# show etherchannel summary
#show etherchannel details
#show interface port-channel 1 etherchannel
#show etherchannel load-balance

if you want to see specific load balance on your port that you load balance is working or not .

Sw#sh int e3/0 | in packets output


if there is alot packets you cannot see clear just clear the counters.
#clear counters