Backhaul IP in LAN extension

There is one optional backhaul-ip configuration in FortiGate to be used in the case that FortiGate is behind a NAT. The backhaul-ip is the external IP used in this NAT device. Both FortExtender and FortiGate need to be aware of this backhaul IP. In FortiExtender, it needs to specify in its discovery static IP.

On FortiExtender

config system management fortigate

set ac-discovery-type static

config static-ac-addr

edit 1

set server <backhaul-ip>

next

end

end

On FortiGate:

config extender-controller extender-profile

edit "FX200F-lanext-default"

config lan-extension

set backhaul-ip <backhaul-ip>

end

next

end

The NAT device should have port mapping/forwarding configuration, which is beyond the scope of this document.