Provision FortiExtender firmware upon authorization

FortiExtender is now able to automatically perform firmware provisioning using CLI commands. This makes it possible to allow federated upgrade of an FortiExtender unit upon discovery and authorization by the FortiGate. The FortiExtender will be upgraded to the latest firmware from FortiGuard, based on the matching FortiExtender firmware version that matches each FortiOS firmware version.

1. FortiGuard has a matrix which contains following table for each FortiExtender. The matrix code is FEXV.

   FGTVersion=7.2.1|FGTBuildNum=01247|FEXPlatform=FX201E|FEXVersion=7.2.0|FEXBuildNum=00113|ImageIdentifier=07002000FIMG1000102000 

2. Test condition: The FortiGate has v7.2.1 b1247 and the FortiExtender has v7.0.3 b056.

   config system global

   set fortiextender-provision-on-authorization enable

   end

3. Once the FortiGate has authorized the FortiExtender, automatical update is enabled for one time.

   config extension-controller extender

   edit "FX0015919000272"

   set id "FX201E5919000272"

   set authorized enable <<-------------------- Upon user auth,

   set device-id 1

   set extension-type wan-extension

   set profile "FX201E-wanext-default"

   set override-allowaccess enable

   set allowaccess ping telnet

   set override-login-password-change enable

   config wan-extension

   set modem1-extension "fext-201"

   end

   set firmware-provision-latest once <<------- Config is automatically set to "once"

   next

   end

4. Once the FortiGate starts to manage the FortiExtender and detects that the FortiExtender's build is lower than that in the matrix (v7.2.0 b0113), the FortiGate will push the image (b0113) to FortiExtender.