SSH access

You can establish SSH access to the CLI by connecting your computer to the FortiExtender using one of its network ports, either directly using a peer connection between the two or through any intermediary network.

SSH must be enabled on the network interface that is associated with the physical network port that is being used.

If your computer is not connected either directly or through a switch to the FortiExtender, you must also configure the FortiExtender using a static route that can forward packets from the FortiExtender to the computer. This can be done using a local console connection or in the GUI.

To connect to the FortiExtender using SSH, you need:

• A computer with an available serial communications (COM) port and an RJ-45 port
• An appropriate console cable
• A network cable
• Terminal emulation software
• Prior configuration of the operating mode, network interface, and static route.

Enable SSH access to the CLI using a local console connection:

1. Using the network cable, connect the FortiExtender network port either directly to the network port on your computer or to a network through which your computer can reach the FortiExtender.
2. Note down the port number of the physical network port.
3. Using the direct console connection, connect and log into the CLI.
4. Enter the following command:

   config system interface
   	edit <interface_str>
   		set allowaccess ssh
   	next 
   

   where <interface_str> is the name of the network interface associated with the physical network port, such as port4.

5. Confirm the configuration using the following commands to show the interface settings:

   config system interface
   edit port4
   show
   For example:
   FX511FTQ22002638 # config system interface
   FX511FTQ22002638 (interface) # edit port4
   FX511FTQ22002638 (port4) # show
   edit port4
       set type physical
       set status up
       set mode static
       set ip
       set gateway
       set mtu-override disable
       set distance 51
       set vrrp-virtual-mac enable
       config vrrp
           set status disable
       end
       set allowaccess ssh
   next
   

Access the FortiExtender CLI using SSH

Once the FortiExtender is configured to accept SSH connections, use an SSH client on your management computer to connect to the CLI.

The following instructions use PuTTy. The steps may vary in other terminal emulators.

To connect to the CLI using SSH:

1. On your management computer, start PuTTy.
2. In the Host Name (or IP address) field, enter the IP address of the FortiExtender network interface that you are connected to and has SSH access enabled.
3. Set the port number to 22, if it is not automatically set.
4. Set the connection type to SSH.
5. Click Open. The SSH client starts to connect to the FortiExtender.

The SSH client may display a warning if this is the first time that you are connecting to the FortiExtender and its SSH key is not yet recognized by the SSH client, or if you previously connected to the FortiExtender using a different IP address or SSH key. This is normal if the management computer is directly connected to the FortiExtender with no network hosts in between.

6. Click Yes to accept the FortiExtender’s SSH key.

The CLI will display the login prompt.

7. Enter the administrator account name, such as admin, and press Enter.
8. Enter the administrator account password and press Enter.

The CLI console shows the command prompt (the FortiExtender hostname followed by #). You can now enter CLI commands.