Backhaul IP in LAN extension

There is one optional backhaul-ip configuration in FortiGate to be used in the case that FortiGate is behind a NAT. The backhaul-ip is the external IP used in this NAT device. Both the FortiExtender and the FortiGate need to be aware of this backhaul-ip. On the FortiExtender, it needs to specify in its discovery static IP.

On the FortiExtender

config system management fortigate

set ac-discovery-type static

config static-ac-addr

edit 1

set server <backhaul-ip>

next

end

end

On the FortiGate:

config extender-controller extender-profile

edit "FX200F-lanext-default"

config lan-extension

set backhaul-ip <backhaul-ip>

end

next

end

The NAT device needs to have port mapping/forwarding configuration, which is beyond the scope of this document.