Fortinet black logo

Enable FortiExtender Controller on FortiOS

Copy Link
Copy Doc ID 28937826-5dea-11ec-bdf2-fa163e15d75b:103817
Download PDF

Enable FortiExtender Controller on FortiOS

After connecting your FortiExtender LAN port to FortiGate, do the following:

  1. Enable the FortiExtender Controller on FortiGate.
  2. config system global

    set fortiextender enable

    end

  3. Make sure that your FortiGate enables FortiExtender Controller.
  4. The FortiExtender-related GUI is enabled by default.

  5. Enable the CAPWAP access to use the FortiGate interface to which the FortiExtender is connected.

    config system interface

    edit lan

    append allowaccess fabric

    next

    end

Caution

The "append allowaccess fabric" command is introduced in FOS 6.2.3, and applies to FortiGate devices running FOS 6.2.3 and later. If you are connecting your FortiExtender to a pre-FortiOS 6.2.3 FortiGate device, you MUST use "append allowacess capwap" instead.

Be sure to keep the following in mind:

  • If FortiLink is enabled, the FortiExtender must be connected to the FortiGate through FortiLink.
  • If FortiLink is enabled and the FortiExtender is not part of FortiLink , the discovery type on the FortiExtender must be static.

Enable FortiExtender Controller on FortiOS

After connecting your FortiExtender LAN port to FortiGate, do the following:

  1. Enable the FortiExtender Controller on FortiGate.
  2. config system global

    set fortiextender enable

    end

  3. Make sure that your FortiGate enables FortiExtender Controller.
  4. The FortiExtender-related GUI is enabled by default.

  5. Enable the CAPWAP access to use the FortiGate interface to which the FortiExtender is connected.

    config system interface

    edit lan

    append allowaccess fabric

    next

    end

Caution

The "append allowaccess fabric" command is introduced in FOS 6.2.3, and applies to FortiGate devices running FOS 6.2.3 and later. If you are connecting your FortiExtender to a pre-FortiOS 6.2.3 FortiGate device, you MUST use "append allowacess capwap" instead.

Be sure to keep the following in mind:

  • If FortiLink is enabled, the FortiExtender must be connected to the FortiGate through FortiLink.
  • If FortiLink is enabled and the FortiExtender is not part of FortiLink , the discovery type on the FortiExtender must be static.