FortiGate LAN extension

LAN extension mode allows a remote FortiGate to provide remote connectivity to a local FortiGate over a backhaul connection.

The remote FortiGate, called the FortiGate Connector, discovers the local FortiGate, called the FortiGate Controller, and forms one or more IPsec tunnels back to the FortiGate Controller. A VXLAN is established over the IPsec tunnels creating an L2 network between the FortiGate Controller and the network behind the FortiGate Connector.

The following topics describe further details about the FortiGate LAN extension feature:

• Example CLI configuration

• Example GUI configuration

• DHCP client mode for inter-VDOM links

• FortiGate secure edge to FortiSASE