Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Admin Guide (Standalone)

    Home FortiExtender 7.4.0 Admin Guide (Standalone)
    7.4.0
    7.6.0
    7.4.4
    7.4.1
    7.4.0
    7.2.3
    7.2.2
    7.2.0
    7.0.3
    7.0.2
    7.0.1

    Interface management

    Interface management

    FortiExtender 201E and 211E each come with four LAN Ethernet ports and one WAN Ethernet port. FortiExtender 511F adds another WAN port with 1GigE SFP fiber port. They all can support multiple devices in NAT mode or a single device in IP pass-through mode. FortiExtender works as an extended WAN interface when configured in IP pass-through mode, but functions as a router when in NAT mode.

    • port1, port2, and port3 are part of the LAN switch with the static IP address of 192.168.200.99/24; a DHCP server also runs on the LAN switch interface with an IP range from 192.168.200.110 to 192.168.200.210 and the default gateway IP of 192.168.200.99.
    • port4/POE port is independent (as a DHCP client).

    The table below describes the CLI commands used to configure the system interface.

    CLI command

    Description

    config system interface

    Enters system interface configuration mode.

    edit <interface_name>

    Specify or edit interface name (lan, lo, lte1 or wan).

    set type <type>

    Select the interface type:

    • lan-switch—LAN interface (Can be edited only).
    • physical—LAN interface (Can be edited only).
    • lte—LTE interface (Can be edited only).
    • loopback—Loopback interface (Can be edited only).
    • tunnel—Tunnel interface (Can be created, edited, or deleted).
    • virtual-wan—Virtual WAN interface (Can be created, edited, or deleted).

    • vlan—Vlan interface (Can be created, edited, or deleted)

    • dummy—Dummy interface (Can be created, edited, or deleted)

    • capwap—Capwap interface (Can edited only)

    • vxlan—Vxlan interface (Can edited only)

    • aggregate—Aggregate interface (Can edited only)

    • switch—Switch interface (Can edited only)

    set status {up | down}

    Specify the interface state:

    • up—Enabled.
    • down—Disabled.

    set mode {static | dhcp}

    Set the interface IP addressing mode:

    • static—If selected, FortiExtender will use a fixed IP address. See set ip <ip> below.
    • dhcp—If selected, FortiExtender will work in DHCP client mode.

    set ip <ip>

    (Applicable only when IP addressing mode is set to "static".) Specify an IPv4 address and subnet mask in the format: x.x.x.x/24

    set gateway <gateway>

    Set an IPv4 address for the router in the format: x.x.x.x

    set mtu <mtu>

    Set the interface's MTU value in the range of 512—1500.

    allowaccess {ping | http | https | telnet}

    Select the types of management traffic allowed to access the interface:

    • ping—PING access.
    • http—HTTP access.
    • https—HTTPS access.
    • telnet—TELNET access.
    • ssh—Secure Shell access.
    • snmp—SNMP access.
    Previous
    Next

    Interface management

    Interface management

    FortiExtender 201E and 211E each come with four LAN Ethernet ports and one WAN Ethernet port. FortiExtender 511F adds another WAN port with 1GigE SFP fiber port. They all can support multiple devices in NAT mode or a single device in IP pass-through mode. FortiExtender works as an extended WAN interface when configured in IP pass-through mode, but functions as a router when in NAT mode.

    • port1, port2, and port3 are part of the LAN switch with the static IP address of 192.168.200.99/24; a DHCP server also runs on the LAN switch interface with an IP range from 192.168.200.110 to 192.168.200.210 and the default gateway IP of 192.168.200.99.
    • port4/POE port is independent (as a DHCP client).

    The table below describes the CLI commands used to configure the system interface.

    CLI command

    Description

    config system interface

    Enters system interface configuration mode.

    edit <interface_name>

    Specify or edit interface name (lan, lo, lte1 or wan).

    set type <type>

    Select the interface type:

    • lan-switch—LAN interface (Can be edited only).
    • physical—LAN interface (Can be edited only).
    • lte—LTE interface (Can be edited only).
    • loopback—Loopback interface (Can be edited only).
    • tunnel—Tunnel interface (Can be created, edited, or deleted).
    • virtual-wan—Virtual WAN interface (Can be created, edited, or deleted).

    • vlan—Vlan interface (Can be created, edited, or deleted)

    • dummy—Dummy interface (Can be created, edited, or deleted)

    • capwap—Capwap interface (Can edited only)

    • vxlan—Vxlan interface (Can edited only)

    • aggregate—Aggregate interface (Can edited only)

    • switch—Switch interface (Can edited only)

    set status {up | down}

    Specify the interface state:

    • up—Enabled.
    • down—Disabled.

    set mode {static | dhcp}

    Set the interface IP addressing mode:

    • static—If selected, FortiExtender will use a fixed IP address. See set ip <ip> below.
    • dhcp—If selected, FortiExtender will work in DHCP client mode.

    set ip <ip>

    (Applicable only when IP addressing mode is set to "static".) Specify an IPv4 address and subnet mask in the format: x.x.x.x/24

    set gateway <gateway>

    Set an IPv4 address for the router in the format: x.x.x.x

    set mtu <mtu>

    Set the interface's MTU value in the range of 512—1500.

    allowaccess {ping | http | https | telnet}

    Select the types of management traffic allowed to access the interface:

    • ping—PING access.
    • http—HTTP access.
    • https—HTTPS access.
    • telnet—TELNET access.
    • ssh—Secure Shell access.
    • snmp—SNMP access.
    Previous
    Next