There is one optional
backhaul-ip configuration in FortiGate to be used in the case that FortiGate is behind a NAT. The
backhaul-ip is the external IP used in this NAT device. Both FortiExtender and FortiGate need to be aware of this
backhaul-ip. In FortiExtender, it needs to specify in its discovery static IP.
config system management fortigate
set ac-discovery-type static
set server <backhaul-ip>
config extender-controller extender-profile
set backhaul-ip <backhaul-ip>
The NAT device should have port mapping/forwarding configuration, which is beyond the scope of this document.