Fortinet black logo

Admin Guide

4.1.2
4.2.2
4.2.1
4.2.0
4.1.3
4.1.2
4.1.1
4.0.2
4.0.0

Manage from FortiExtender Cloud

Manage from FortiExtender Cloud

To manage FortiExtender from FortiExtender Cloud, you must have the following:

  • A FortiCare or FortiGate account
  • A FortiCloud key

You can find your FortiCloud key on the sticker on the front of your FortiExtender device.

Configure with FortiExtender Cloud

Refer to the FortiExtender Cloud Admin Guide for instructions on how to

  • Access FortiExtender Cloud.
  • Deploy FortiExtender devices.
  • Synchronize devices.

IP Pass-through mode with Cloud management

  1. On FortiExtender Cloud, configure a profile in IP pass-through mode.

  2. Connect the FortiExtender LAN port to the WAN port of FortiGate or a third-party appliance.

    3. If the WAN port is not POE-enabled, use a power injector (12V/1A) to power the FortiExtender device.
  3. Set the WAN port of FortiGate or a third-party appliance to DHCP mode. The device will get an IP address from the ISP and connect to the Internet.

NAT mode with Cloud management

  1. Configure a profile in NAT mode. Refer to Step 1 in the preceding section.
  2. Use the following commands to complete the configurations:
Address

config network address

edit all

set type ipmask

set subnet 0.0.0.0/0

next

edit none

set type ipmask

set subnet 0.0.0.0/32

next

edit src

set type ipmask

set subnet 192.168.2.0/24

next

end

Firewall policies

config firewall policy

edit all-pass

set srcintf

set dstintf

set srcaddr src

set dstaddr all

set action accept

set status enable

set service

set nat enable

next

end

Policy-basaed routing (PBR)

config router

config policy

edit eth1-pbr

set input-device

set src 192.168.2.0/24

set srcaddr

set dst

set dstaddr

set service

set target target.eth1

set status enable

set comment

next

end

OBM management

FortiExtender can be connected to any router’s console port behind it via its USB port, thereby enabling out-of-band management (OBM). This mode requires access to FortiExtender over its LTE cellular interface from the Internet.

Once you've logged into the FortiExtender, you can access the device’s console port using the following procedures:

  1. Log into the FortiExtender device.
  2. Connect to the console port in the back of the device.
  3. Execute the command:

    4. execute obm-console

  4. Choose a baud rate:
    1. 9600
    2. 19200
    3. 38400
    4. 57600
    5. 115200

Make sure that the baud rate you select in Step 4 above matches the baud rate of the router which is connected to the serial console via the USB port.
Previous
Next

Manage from FortiExtender Cloud

To manage FortiExtender from FortiExtender Cloud, you must have the following:

  • A FortiCare or FortiGate account
  • A FortiCloud key

You can find your FortiCloud key on the sticker on the front of your FortiExtender device.

Configure with FortiExtender Cloud

Refer to the FortiExtender Cloud Admin Guide for instructions on how to

  • Access FortiExtender Cloud.
  • Deploy FortiExtender devices.
  • Synchronize devices.

IP Pass-through mode with Cloud management

  1. On FortiExtender Cloud, configure a profile in IP pass-through mode.

  2. Connect the FortiExtender LAN port to the WAN port of FortiGate or a third-party appliance.

    3. If the WAN port is not POE-enabled, use a power injector (12V/1A) to power the FortiExtender device.
  3. Set the WAN port of FortiGate or a third-party appliance to DHCP mode. The device will get an IP address from the ISP and connect to the Internet.

NAT mode with Cloud management

  1. Configure a profile in NAT mode. Refer to Step 1 in the preceding section.
  2. Use the following commands to complete the configurations:
Address

config network address

edit all

set type ipmask

set subnet 0.0.0.0/0

next

edit none

set type ipmask

set subnet 0.0.0.0/32

next

edit src

set type ipmask

set subnet 192.168.2.0/24

next

end

Firewall policies

config firewall policy

edit all-pass

set srcintf

set dstintf

set srcaddr src

set dstaddr all

set action accept

set status enable

set service

set nat enable

next

end

Policy-basaed routing (PBR)

config router

config policy

edit eth1-pbr

set input-device

set src 192.168.2.0/24

set srcaddr

set dst

set dstaddr

set service

set target target.eth1

set status enable

set comment

next

end

OBM management

FortiExtender can be connected to any router’s console port behind it via its USB port, thereby enabling out-of-band management (OBM). This mode requires access to FortiExtender over its LTE cellular interface from the Internet.

Once you've logged into the FortiExtender, you can access the device’s console port using the following procedures:

  1. Log into the FortiExtender device.
  2. Connect to the console port in the back of the device.
  3. Execute the command:

    4. execute obm-console

  4. Choose a baud rate:
    1. 9600
    2. 19200
    3. 38400
    4. 57600
    5. 115200

Make sure that the baud rate you select in Step 4 above matches the baud rate of the router which is connected to the serial console via the USB port.
Previous
Next