Fortinet black logo

FortiGate-FortiExtender zero-touch provisioning (ZTP)

Copy Link
Copy Doc ID 28937826-5dea-11ec-bdf2-fa163e15d75b:583508
Download PDF

FortiGate-FortiExtender zero-touch provisioning (ZTP)

FortiExtender supports FortiGate-FortiExtender zero-touch provision (ZTP). The FortiExtender default discovery mode is set to auto with DHCP server enabled over the LAN interface. The process is outlined stepwise as follows:

  1. A SIM card without a PIN code is expected to be used for ZTP, and the default APN should be retrieved automatically at first connection.
  2. Acting as a DHCP client, the FortiGate connects to the FortiExtender LAN port (1, 2, or 3) interface to obtain a private IP to reach FortiManager.
  3. The FortiGate reports the discovered FortiExtender to FortiManager to authorize it (FortiExtender).
  4. Once authorized, the FortiExtender switches to IP-passthrough mode and then reboots itself.
  5. Upon booting up in IP-passthrough mode, the FortiExtender serves as the FortiExtender WAN interface of the FortiGate.

FortiGate-FortiExtender zero-touch provisioning (ZTP)

FortiExtender supports FortiGate-FortiExtender zero-touch provision (ZTP). The FortiExtender default discovery mode is set to auto with DHCP server enabled over the LAN interface. The process is outlined stepwise as follows:

  1. A SIM card without a PIN code is expected to be used for ZTP, and the default APN should be retrieved automatically at first connection.
  2. Acting as a DHCP client, the FortiGate connects to the FortiExtender LAN port (1, 2, or 3) interface to obtain a private IP to reach FortiManager.
  3. The FortiGate reports the discovered FortiExtender to FortiManager to authorize it (FortiExtender).
  4. Once authorized, the FortiExtender switches to IP-passthrough mode and then reboots itself.
  5. Upon booting up in IP-passthrough mode, the FortiExtender serves as the FortiExtender WAN interface of the FortiGate.