Recover a failed FortiOS upgrade using the backup firmware partition
Recover a FortiGate that loses LAN connectivity after a firmware jump by booting its working backup partition from the serial console and then following the verified upgrade path.
Knowledge Base
Search practical IT knowledge
Search titles, full article content, commands, error messages, vendors, products, versions and tags.
11 results · filters active
FortiToken activation email fails: FortiGate SMTP local-out source IP
Troubleshoot FortiToken enrollment emails that time out on SMTP TCP/465 when FortiGate local-out traffic uses an unsuitable WAN source address.
FortiClient IKEv2 VPN fails after partial XML import: missing PSK
Diagnose an IKEv2 connection failure after importing a sanitized FortiClient XML profile that omits the pre-shared key.
HPE MSA 2040: recover a forgotten administrator password using the local USB CLI
Recover management access to an HPE MSA 2040 when administrator credentials are unknown, using physical USB CLI access and the restoreusers recovery mechanism; distinguish user recovery from a factory reset.
Client receives a guest VLAN address after an access port is assigned to the wrong VLAN
Trace a client that loses access to an internal web service through its DHCP lease, switch access VLAN, trunk and router ACL, then validate the port correction.
Lenovo DE Series with VMware ESXi over SAS: fix single-path visibility, ALUA/NMP claiming and controller management
Troubleshoot Lenovo ThinkSystem DE Series storage connected directly to VMware ESXi over SAS when LUNs appear with only one path, devices show degraded status, volumes are not on the preferred controller, or ESXi reports HPP/NMP claim-rule conflicts.
ESXi Host Certificate Status shows Expiration imminent
Resolve the ESXi Host Certificate Status alarm when a VMCA-signed host certificate is approaching expiration in vCenter Server.
Meraki mesh repeater fails 802.1X because the gateway AP is missing from Windows NPS RADIUS Clients
Troubleshoot a Cisco Meraki MR mesh repeater where normal SSIDs work but an Enterprise/802.1X SSID fails with RADIUS timeouts because the gateway AP is not registered as a RADIUS Client in Windows Network Policy Server.
vCenter Certificate Status alarm caused by expired BACKUP_STORE certificates
Resolve a persistent vCenter Certificate Status alarm when active certificates are valid but expired historical certificates remain in the VECS BACKUP_STORE.
vCenter virtual disks show 0 GB or blank properties due to SSL trust mismatch
Troubleshoot vCenter Server when VM disk capacity or disk properties appear as 0 GB, blank, or unavailable while the same VMDKs display correctly in the ESXi Host Client.
FortiGate IPsec tunnel is up but traffic does not pass
Systematically troubleshoot a FortiGate IPsec tunnel that is established but does not carry the expected application or subnet traffic.