SETTING UP FORTIEXTENDER’S TO STANDALONE MODE
SCENARIO:
Set up Fortiextender (FEX) to standalone mode on live Petronas station . This is only applicable to
site which TM primary connection was down . FEXT should be using version v4.1.2
STEPS:
1. Set laptop ip to static mode (use 192.168.1.90 ) same gateway as FEXT.
2. Access to FEX’s GUI from browser to http://192.168.1.2 (default FEXT ip).
Login to FEXT.
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE
3. Navigate to ‘setting’ button and click in (located bottom-left)
4. At ‘setting’ page, navigate to ‘Management Configuration’.
Select edit button . Set as below and save .
Controller : local
Mode : nat
5. The Management Setup dashboard now has changed to Standalone NAT mode .
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE
6. Next , access FEXT console tab .
7. Set the nas1 interface to static mode with ip (192.168.4.1/24) . Rerfer below command .
config system interface
edit nas1
set status up
set mode static
set ip 192.168.4.1/24
set mtu 1500
set allowaccess http ping telnet
end
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE
8. After , unplug FEXT from poe (reboot FEXT)
After reboot , you need to access FEXT via new ip (192.168.4.1)
9. Continue to login to FEXT
10. Next , navigate to Networking tab .
11. You will see the nas1 interface have changed to static mode and static ip (192.168.4.1)
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE
12. Next , Set dhcpserver via console . Rerfer below command .
config system dhcpserver
edit wan1
set status enable
set lease-time 8640000
set dns-service default
set default-gateway 192.168.4.1
set netmask 255.255.255.0
set interface nas1
set start-ip 192.168.4.2
set end-ip 192.168.4.254
set mtu 1500
next
end
13. Next , navigate to firewall tab . This is to create policy to local interface (nas1)
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE
14. Select “create rule” button .
15. Enter and select below details .
Name : wan1
Source Interface : nas1
Destination Interface : eth1
Source Addresses : All
Destination Addresses : All
Service : All
Action : accept
NAT : enable
Status : enable
16. Click save .
17. Fext Standalone mode complete .
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE
18. Now you can plug FEXT to SDWAN WAN1 port as a replace for TM .
19. Connect to SDWAN and check for wan1 interface .
the interface should shows DHCP mode with ip of 192.168.4.2
20. Next , navigate to “SDWAN” tab under :NETWORK” tab .
the gateway should be as same as FEXT gateway (192.168.4.1).
change the gateway if necessary .
SETTING UP FORTIEXTENDER’S TO STANDALONE MODE
21. Now , check the ipsec under WAN1 (primary) , if up then you can proceed to upgrade
existing FEXT to version v4.1.2.
