Scribd
Upload
40 views

FORTIEXTENDER GUIDELINE STANDALONE

Uploaded by

alabaladi2003
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
40 views

FORTIEXTENDER GUIDELINE STANDALONE

Uploaded by

alabaladi2003
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 8

SETTING UP FORTIEXTENDER’S TO STANDALONE MODE

SCENARIO:

Set up Fortiextender (FEX) to standalone mode on live Petronas station . This is only applicable to
site which TM primary connection was down . FEXT should be using version v4.1.2

STEPS:

1. Set laptop ip to static mode (use 192.168.1.90 ) same gateway as FEXT.

2. Access to FEX’s GUI from browser to http://192.168.1.2 (default FEXT ip).


Login to FEXT.
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE

3. Navigate to ‘setting’ button and click in (located bottom-left)


4. At ‘setting’ page, navigate to ‘Management Configuration’.
Select edit button . Set as below and save .

Controller : local
Mode : nat

5. The Management Setup dashboard now has changed to Standalone NAT mode .
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE

6. Next , access FEXT console tab .

7. Set the nas1 interface to static mode with ip (192.168.4.1/24) . Rerfer below command .

config system interface


edit nas1
set status up
set mode static
set ip 192.168.4.1/24
set mtu 1500
set allowaccess http ping telnet
end
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE

8. After , unplug FEXT from poe (reboot FEXT)


After reboot , you need to access FEXT via new ip (192.168.4.1)
9. Continue to login to FEXT

10. Next , navigate to Networking tab .


11. You will see the nas1 interface have changed to static mode and static ip (192.168.4.1)
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE

12. Next , Set dhcpserver via console . Rerfer below command .

config system dhcpserver


edit wan1
set status enable
set lease-time 8640000
set dns-service default
set default-gateway 192.168.4.1
set netmask 255.255.255.0
set interface nas1
set start-ip 192.168.4.2
set end-ip 192.168.4.254
set mtu 1500
next
end

13. Next , navigate to firewall tab . This is to create policy to local interface (nas1)
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE

14. Select “create rule” button .

15. Enter and select below details .

Name : wan1
Source Interface : nas1
Destination Interface : eth1
Source Addresses : All
Destination Addresses : All
Service : All
Action : accept
NAT : enable
Status : enable

16. Click save .


17. Fext Standalone mode complete .
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE

18. Now you can plug FEXT to SDWAN WAN1 port as a replace for TM .
19. Connect to SDWAN and check for wan1 interface .
the interface should shows DHCP mode with ip of 192.168.4.2

20. Next , navigate to “SDWAN” tab under :NETWORK” tab .


the gateway should be as same as FEXT gateway (192.168.4.1).
change the gateway if necessary .
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE

21. Now , check the ipsec under WAN1 (primary) , if up then you can proceed to upgrade
existing FEXT to version v4.1.2.

You might also like