Provision FortiExtender firmware upon authorization 7.2.1

FortiExtender is now able to automatically perform firmware provisioning using CLI commands. This allows for federated upgrade of multiple FortiExtender units upon discovery and authorization by the FortiGate. Each FortiExtender device will be upgraded to the latest firmware from FortiGuard, based on the matching FortiExtender firmware version that matches each FortiOS firmware version.

1. FortiGuard has a matrix which contains the following table for each FortiExtender. The matrix code is FEXV.

   FGTVersion=7.2.1|FGTBuildNum=01247|FEXPlatform=FX201E|FEXVersion=7.2.0|FEXBuildNum=00113|ImageIdentifier=07002000FIMG1000102000 

2. Test condition: The FortiGate has v7.2.1 b1247 and the FortiExtender has v7.0.3 b056.

   config system global

   set fortiextender-provision-on-authorization enable

   end

3. Once the FortiGate has authorized the FortiExtender, automatic update is enabled for one time.

   config extension-controller extender

   edit "FX0015919000272"

   set id "FX201E5919000272"

   set authorized enable <<-------------------- Upon user auth,

   set device-id 1

   set extension-type wan-extension

   set profile "FX201E-wanext-default"

   set override-allowaccess enable

   set allowaccess ping telnet

   set override-login-password-change enable

   config wan-extension

   set modem1-extension "fext-201"

   end

   set firmware-provision-latest once <<------- Config is automatically set to "once"

   next

   end

4. Once the FortiGate starts to manage the FortiExtender and detects that the FortiExtender's build number is lower than that in the matrix (v7.2.0 b0113), the FortiGate will push the image (b0113) to the FortiExtender.