Support multiple APNs in WAN extension mode 7.6.1

This information is also available in the FortiExtender 7.6.1 Managed Administration Guide: Multiple APNs in WAN-Extension mode

GUI support is available in FOS 7.6.3. For more information, see Add GUI support for multiple APNs in WAN extension mode 7.6.3.

This release supports adding multiple APNs when operating in WAN-Extension mode. Select FortiExtender models can support multiple Access Point Names (APNs). By using different APNs to create multiple Packet Data Networks (PDNs), FortiGate can establish up to four FortiExtender virtual interfaces from a single FortiExtender modem. These interfaces provide users with more flexibility to customize data traffic steering, improving FortiGate connectivity and performance through FortiExtender.

To configure multiple APNs - CLI:

1. From the FortiExtender CLI, create multiple data plans with unique APNs.

   config extension-controller dataplan
     edit "plan1"
       set apn "ltedata.apn"
       set capacity 100
     next
     edit "plan2"
       set apn "ltemobile.apn"
       set capacity 200
     next
   end

2. In the FortiExtender profile, enable multiple-PDN and add your data plans.

   config extension-controller extender-profile
     edit "FXW51G-wanext-default"
       set model FXW51G
       config cellular
         set dataplan "plan1"
         config modem1
           set multiple-PDN enable
           set pdn1-dataplan "plan1"
           set pdn2-dataplan "plan2"
           set pdn3-dataplan ''
           set pdn4-dataplan ''
         end
       end
     next
   end

3. Authorize the FortiExtender and set your WAN-Extension PDN interfaces so that FortiGate obtains multiple virtual interfaces with different PDNs.

   config extension-controller extender
     edit "FX016S224000024"
       set id "FXW51GS224000024"
       set authorized enable
       set extension-type wan-extension
       set profile "FXW51G-wanext-default"
       config wan-extension
         set modem1-pdn1-interface "fext1"
         set modem1-pdn2-interface "fext2"
         set modem1-pdn3-interface ''
         set modem1-pdn4-interface ''
       end
     next
   end

4. Configure firewall polices to steer different traffic flows to different FortiExtender interfaces based on PDNs.

   config firewall policy
     edit 3
       set name "control-flow"
       set uuid 6aaedd2a-f309-51ef-9fee-0ca8ef8f4206
       set srcintf "wan1"
       set dstintf "fext1"
       set action accept
       set srcaddr "all"
       set dstaddr "all"
       set schedule "always"
       set service "MMS"
       set nat enable
     next
     edit 4
       set name "data-flow"
       set uuid 8a47bb70-f309-51ef-91a0-35e0e2bc5547
       set srcintf "wan1"
       set dstintf "fext2"
       set action accept
       set srcaddr "all"
       set dstaddr "all"
       set schedule "always"
       set service "ALL"
       set nat enable
     next
   end