IP pass-through mode

In IP pass-through mode, FortiExtender distributes the WAN IP address provided by the NSP to the device behind it.

Enable IP pass-through mode

FortiExtender can be used as a stand-alone device, without integration with FortiGate or FortiExtender Cloud. In this scenario, all configuration is done locally on the FortiExtender device. We call this mode of operation "local" mode.

You can enable IP pass-through in local mode using the following commands:

# config system management

(management)# set discovery-type local

(management) <M># config local

(local)# set mode ip-passthrough

There can be only a single device behind FortiExtender (standalone) when in IP-passthrough mode. That device can be either a router that NATs the traffic behind or a PC, but it cannot be a switch (L2 or L3) without NAT.

Configure a virtual wire pair

A virtual wire pair configuration is necessary to enable IP pass-through forwarding between two ports. Configuration of ip-pass-through mode differs, depending the port on which the DHCP server is configured. There are two scenarios:

If a LAN port (port1 through port3 ) is being used, we recommend that you disable the DHCP server before setting FortiExtender in IP pass-through mode:

config system virtual-wire-pair
    set lte1-mapping lan
end

If port4 is being used, no such action is required:

config system virtual-wire-pair
    set lte1-mapping port4
end

For best practice, pug in port4 when setting FortiExtender in IP pass-through mode.