LAN extension configuration in a profile
The following example shows the "lan-extension" configuration in a default LAN extension profile.
FortiGate (extender-profile) # get FX200F-lanext-default name : FX200F-lanext-default id : 4 model : FX200F extension : lan-extension allowaccess : login-password-change: no enforce-bandwidth : enable bandwidth-limit : 200 lan-extension: link-loadbalance : loadbalance ipsec-tunnel : fext-ipsec-rthk backhaul-interface : lan backhaul-ip : backhaul: == [ 1 ] name: 1 == [ 2 ] name: 2
| Parameter | Description |
|---|---|
name
|
The profile name |
id
|
The profile ID (for system internal record) |
model
|
The FortiExtender model for the profile |
extension [lan-extension | wan-extension]
|
The extension type for the profile |
alloweaccess [telent|http|https|snmp|ping|ssh] |
The multi-option setting for the lan-extension switch interface of the FortiExtender. For more details, see Allowaccess for FortiExtender management. |
login-password-change [yes|no|default]
|
The setting of the admin password of the FortiExtender. For more details, see Configure FortiExtender admin password |
enforce-bandwidth [enable|disable]
|
Enable or disable enforcement of bandwidth limit. Note: |
bandwidth-limit
|
Specify the bandwidth limit. |
|
|
Two ports are configured for the FortiExtender for load-balancing. For |
|
|
This is the IPsec tunnel interface that will be used in underlying data transportation. It provide secure connection between the FortiExtender and the FortiGate. This entry will be auto-generated. |
|
|
This is the egress interface for data transportation between the FortiGate and the other FortiExtenders using this profile. The default will be automatically filled with the interface that is used to manage the FortiExtender. You can configure it based on your network topology. |
|
|
This is used for the FortiGate behind a NAT device (or DNAT, LoadBalancer, etc.). The |
The following is an example of a backhaul configuration:
FortiGate (backhaul) # edit 1 FortiGate (1) # get name : 1 port : port1 weight : 1
If link-loadbalance is configured as "activebackup", the following will be shown:
name : 1
port : port1
role : primary
| Parameter | Description |
|---|---|
name
|
The name of the backhaul entry. |
port
|
The port on the FortiExtender that sends traffic to the FortiGate in LAN extension. |
weight
|
Enter the weight if the link-loadbalance is configured as |
|
|
Specify whether the port is primary or secondary. |