Fortinet black logo

Admin Guide (Standalone)

Interface management

Interface management

FortiExtender (Standalone) 201E and 211E each come with four LAN Ethernet ports and one WAN Ethernet port. FortiExtender 511F adds another WAN port with 1GigE SFP fiber port. They all can support multiple devices in NAT mode or a single device in IP pass-through mode. FortiExtender works as an extended WAN interface when configured in IP pass-through mode, but functions as a router when in NAT mode.

  • port1, port2, and port3 are part of the LAN switch with the static IP address of 192.168.200.99/24; a DHCP server also runs on the LAN switch interface with an IP range from 192.168.200.110 to 192.168.200.210 and the default gateway IP of 192.168.200.99.
  • port4/POE port is independent (as a DHCP client).

The table below describes the CLI commands used to configure the system interface.

CLI command

Description

config system interface

Enters system interface configuration mode.

edit <interface_name>

Specify or edit interface name (lan, lo, lte1 or wan).

set type <type>

Select the interface type:

  • lan-switch—LAN interface (Can be edited only).
  • physical—LAN interface (Can be edited only).
  • lte—LTE interface (Can be edited only).
  • loopback—Loopback interface (Can be edited only).
  • tunnel—Tunnel interface (Can be created, edited, or deleted).
  • virtual-wan—Virtual WAN interface (Can be created, edited, or deleted).

set status {up | down}

Specify the interface state:

  • up—Enabled.
  • down—Disabled.

set mode {static | dhcp}

Set the interface IP addressing mode:

  • static—If selected, FortiExtender (Standalone) will use a fixed IP address. See set ip <ip> below.
  • dhcp—If selected, FortiExtender (Standalone) will work in DHCP client mode.

set ip <ip>

(Applicable only when IP addressing mode is set to "static".) Specify an IPv4 address and subnet mask in the format: x.x.x.x/24

set gateway <gateway>

Set an IPv4 address for the router in the format: x.x.x.x

set mtu <mtu>

Set the interface's MTU value in the range of 512—1500.

allowaccess {ping | http | https | telnet}

Select the types of management traffic allowed to access the interface:

  • ping—PING access.
  • http—HTTP access.
  • https—HTTPS access.
  • telnet—TELNET access.
  • ssh—Secure Shell access.
  • snmp—SNMP access.

Interface management

FortiExtender (Standalone) 201E and 211E each come with four LAN Ethernet ports and one WAN Ethernet port. FortiExtender 511F adds another WAN port with 1GigE SFP fiber port. They all can support multiple devices in NAT mode or a single device in IP pass-through mode. FortiExtender works as an extended WAN interface when configured in IP pass-through mode, but functions as a router when in NAT mode.

  • port1, port2, and port3 are part of the LAN switch with the static IP address of 192.168.200.99/24; a DHCP server also runs on the LAN switch interface with an IP range from 192.168.200.110 to 192.168.200.210 and the default gateway IP of 192.168.200.99.
  • port4/POE port is independent (as a DHCP client).

The table below describes the CLI commands used to configure the system interface.

CLI command

Description

config system interface

Enters system interface configuration mode.

edit <interface_name>

Specify or edit interface name (lan, lo, lte1 or wan).

set type <type>

Select the interface type:

  • lan-switch—LAN interface (Can be edited only).
  • physical—LAN interface (Can be edited only).
  • lte—LTE interface (Can be edited only).
  • loopback—Loopback interface (Can be edited only).
  • tunnel—Tunnel interface (Can be created, edited, or deleted).
  • virtual-wan—Virtual WAN interface (Can be created, edited, or deleted).

set status {up | down}

Specify the interface state:

  • up—Enabled.
  • down—Disabled.

set mode {static | dhcp}

Set the interface IP addressing mode:

  • static—If selected, FortiExtender (Standalone) will use a fixed IP address. See set ip <ip> below.
  • dhcp—If selected, FortiExtender (Standalone) will work in DHCP client mode.

set ip <ip>

(Applicable only when IP addressing mode is set to "static".) Specify an IPv4 address and subnet mask in the format: x.x.x.x/24

set gateway <gateway>

Set an IPv4 address for the router in the format: x.x.x.x

set mtu <mtu>

Set the interface's MTU value in the range of 512—1500.

allowaccess {ping | http | https | telnet}

Select the types of management traffic allowed to access the interface:

  • ping—PING access.
  • http—HTTP access.
  • https—HTTPS access.
  • telnet—TELNET access.
  • ssh—Secure Shell access.
  • snmp—SNMP access.