Discover a FortiExtender unit

For a FortiGate acting as the access controller (AC) to discover a FortiExtender unit, the FortiGate must be able to reach the FortiExtender. There are two ways in which a FortiExtender with the factory default configuration can be discovered by a FortiGate:

• Broadcast

• Static IP

Broadcast

The FortiExtender can be discovered when sending broadcast traffic in its local subnet. In this case, the FortiGate and the FortiExtender must be in the same subnet. The interfaces specified in "discovery-intf" configured on the FortiExtender should include the interface that can reach out to the FortiGate, as shown in the example below:

config system management fortigate

set ac-discovery-type broadcast

set discovery-intf lan port4

end

Static

The FortiExtender sends discover requests to a preconfigured IP address on the FortiGate. You can specify multiple FortiGates in IPv4-address or FQDN format. The FortiExtender will choose one that it can reach and connect. You can specify up to 16 FortiGate entries in the configuration. See the following example:

config system management fortigate

set ac-discovery-type static

config static-ac-addr

edit 1

set server 192.168.1.99

next

edit 2

set server fortinet.com

next

end

set discovery-intf lan port4

end

From the FortiGate, configure the interface used for discovery and set allowaccess to fabric and ping:

config system interface

edit "lan"

set vdom "root"

set ip 192.168.1.99 255.255.255.0

set allowaccess ping https ssh fgfm fabric

set type hard-switch

set stp enable

set role lan

set snmp-index 21

next

end