Downgrading the firmware

Downgrading the firmware is not recommended.

The downgrade process may cause the FortiVoice system to remove parts of the configuration that are invalid for that earlier version.

After downgrading the firmware, you may be unable to restore your previous configuration from the backup configuration file.

In some cases, you may lose all call data and configurations.

You can use either the GUI or the CLI to downgrade the firmware of the FortiVoice unit.

Administrators whose access profile contains Read-Write access in the Others category, such as the admin administrator, can change the FortiVoice firmware.

To determine if you are downgrading your firmware image, examine the firmware version number. For example, if your current firmware version is v64,build0469 and you are changing to v64,build0446, then the earlier build number indicates that you are downgrading your firmware image.

To downgrade to an earlier firmware version using the GUI

Download the firmware image files from the Fortinet Support website. For details, see Downloading the firmware image file.
Back up the configuration and call data. For details, see Backing up the configuration.
Log in to the GUI as the admin administrator, or an administrator account that has system configuration read and write privileges.
To upload the firmware for an upgrade:
1. Go to Dashboard > Status.
2. In the System Information widget, go to Firmware version and click Update.
3. Locate and select the file, and then click Open.
4. To confirm the upload, click Yes.
  Your web browser uploads the firmware file to the FortiVoice unit. The FortiVoice unit installs the firmware and restarts. Time required varies by the size of the file and the speed of your network connection.
  The FortiVoice unit reverts the configuration to default values for that version of the firmware.
Clear the cache of your web browser and restart it to ensure that it reloads the GUI and correctly displays all changes.
Reconnect to the FortiVoice unit to either reconfigure the FortiVoice unit or restore the configuration file. For details, see
To verify that the firmware was successfully installed, log in to the GUI and go to Dashboard > Status and in the System Information area. Text appearing in the Firmware version row indicates the currently installed firmware version.

To downgrade to an earlier firmware version using the CLI

Download the firmware image files from the Fortinet Support website. For details, see Downloading the firmware image file.
Back up the configuration and call data. For details, see Backing up the configuration.
Connect your management computer to the FortiVoice console port using an RJ-45 to DB-9 serial cable or a null-modem cable.
Initiate a connection from your management computer to the CLI of the FortiVoice unit, and log in as the admin administrator, or an administrator account that has system configuration read and write privileges.
Connect port1 of the FortiVoice unit directly or to the same subnet as a TFTP server.
Copy the new firmware image file to the root directory of the TFTP server.
Verify that the TFTP server is currently running, and that the FortiVoice unit can reach the TFTP server.
To use the FortiVoice CLI to verify connectivity, enter the following command:
execute ping 192.168.2.99
where 192.168.2.99 is the IP address of the TFTP server.
Enter the following command to download the firmware image from the TFTP server to the FortiVoice unit:
execute restore image tftp <name_str> <tftp_ipv4>
where <name_str> is the name of the firmware image file and <tftp_ipv4> is the IP address of the TFTP server. For example, if the firmware image file name is image.out and the IP address of the TFTP server is 192.168.2.99, enter:
execute restore image tftp image.out 192.168.2.99
One of the following messages appears:
This operation will replace the current firmware version!
Do you want to continue? (y/n)
or:
Get image from tftp server OK.
Check image OK.
This operation will downgrade the current firmware version!
Do you want to continue? (y/n)
Type y.
The FortiVoice unit downloads the firmware image file from the TFTP server. The FortiVoice unit installs the firmware and restarts. Time required varies by the size of the file and the speed of your network connection.
If you are downgrading the firmware to a previous version, the FortiVoice unit reverts the configuration to default values for that version of the firmware. You must either reconfigure the FortiVoice unit or restore the configuration file.
If you also use the GUI, clear the cache of your web browser and restart it to ensure that it reloads the GUI and correctly displays all tab, button, and other changes.
To verify that the firmware was successfully installed, log in to the CLI and type:
get system status
Reconnect to the FortiVoice unit using its default IP address for port1, 192.168.1.99, and restore the configuration file. For details, see Reconnecting to the FortiVoice unit and Restoring the configuration.

Reconnecting to the FortiVoice unit

After a firmware downgrade, the FortiVoice unit reverts to default settings for the installed firmware version, including the IP addresses of network interfaces through which you connect to the FortiVoice GUI and/or CLI.

If your FortiVoice unit has not been reset to its default configuration, but you cannot connect to the GUI or CLI, you can restore the firmware, resetting the FortiVoice unit to its default configuration in order to reconnect using the default network interface IP address. For more information, see Performing a clean firmware installation.

To reconnect using the CLI

Connect your management computer to the FortiVoice console port using an RJ-45 to DB-9 serial cable or a null-modem cable.
Start a terminal emulation software such as PuTTY.
Configure the software to connect directly to the communications (COM) port on your computer and click OK.
Use the following serial connection settings:
Bits per second
9600
Data bits
8
Parity
None
Stop bits
1
Flow control
None
Start a serial connection to connect to the FortiVoice CLI.
The login prompt appears.
Type admin and press Enter twice.
The following prompt appears:
Welcome!
Enter the following command:
set system interface <interface_str> mode static ip <address_ipv4> <mask_ipv4>
where:
- <interface_str> is the name of the network interface, such as port1
- <address_ipv4> is the IP address of the network interface, such as 192.168.1.10
- <mask_ipv4> is the netmask of the network interface, such as 255.255.255.0
Enter the following command:
set system interface <interface_str> config allowaccess <accessmethods_str>
where:
- <interface_str> is the name of the network interface configured in the previous step, such as port1
- <accessmethods_str> is a space-delimited list of the administrative access protocols that you want to allow on that network interface, such as ping ssh https
  The network interface IP address and netmask are saved.
You can now reconnect to either the GUI or CLI through that network interface. For information on restoring the configuration, see Restoring the configuration.

Restoring the configuration

After a firmware downgrade or clean firmware installation, you may be able to restore a backup copy of the configuration file from your local computer using either the GUI or CLI. For information about configuration backup, see Backing up the configuration.

To restore the configuration file using the GUI

Clear your browser’s cache. If your browser is currently displaying the GUI, also refresh the page.
Log in to the GUI.
Go to System > Maintenance > Configuration.
Under Restore Configuration, click Browse to locate and select the configuration file that you want to restore, then click Restore.
The FortiVoice unit restores the configuration file and reboots. Time required varies by the size of the file and the speed of your network connection.
After restoring the configuration file, verify that the settings have been successfully loaded.

To restore the configuration file using the CLI

Initiate a connection from your management computer to the CLI of the FortiVoice unit, and log in as the admin administrator, or an administrator account that has system configuration read and write privileges.
Connect a network interface of the FortiVoice unit directly or to the same subnet as a TFTP server.
Copy the new firmware image file to the root directory of the TFTP server.
Verify that the TFTP server is currently running, and that the FortiVoice unit can reach the TFTP server.
To use the FortiVoice CLI to verify connectivity, enter the following command:
execute ping 192.168.2.99
where 192.168.2.99 is the IP address of the TFTP server.
Enter the following command:
execute restore config tftp <file_name> <tftp_ipv4>
The following message appears:
This operation will overwrite the current Setting!
(The current admin password will be preserved.)
Do you want to continue? (y/n)
Enter y.
The FortiVoice unit restores the configuration file and reboots. Time required varies by the size of the file and the speed of your network connection.
After restoring the configuration file, verify that the settings have been successfully loaded.