Fortinet FortiExtender 40D User manual

QuickStart Guide
FortiExtender 20D, 40D

December 21, 2015
Copyright© 2015 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
FortiCare® and FortiGuard®, and certain other marks are registered
trademarks of Fortinet, Inc., and other Fortinet names herein may also be
registered and/or common law trademarks of Fortinet. All other product
or company names may be trademarks of their respective owners.
Performance and other metrics contained herein were attained in internal
lab tests under ideal conditions, and actual performance and other results
may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any
binding commitment by Fortinet, and Fortinet disclaims all warranties,
whether express or implied, except to the extent Fortinet enters a binding
written contract, signed by Fortinet’s General Counsel, with a purchaser
that expressly warrants that the identified product will perform according
to certain expressly-identified performance metrics and, in such event, only
the specific performance metrics expressly identified in such binding written
contract shall be binding on Fortinet. For absolute clarity, any such warranty
will be limited to performance in the same ideal conditions as in Fortinet’s
internal lab tests. Fortinet disclaims in full any covenants, representations,
and guarantees pursuant hereto, whether express or implied. Fortinet
reserves the right to change, modify, transfer, or otherwise revise this
publication without notice, and the most current version of the publication
shall be applicable.

QuickStart Guide
Register for Support
Register your Fortinet product to receive:
• Technical Support
• New product features
• Protection from new threats
Vous devez enregistrer le produit pour recevoir:
• Support technique
• Nouvelles fonctionnalitées du produit
• Protection contre de nouvelles menaces
La reistrazione ti permette di usufruire di:
• Supporto Tecnico
• Nuove funzionalita
• Proteezione dalle ultime minaccce
Debe registrar el producto para recibir:
• Apoyo técnico
• Nuevas funcionalidades del producto
• Protección contra ataques
登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート • 新機能の追加 • 新しい脅威への防御
请马上注册
您的飞塔产品
您在注册以后才能得到技术支持、新产品特点信息、最新威胁防护
https://support.fortinet.com
Toll free: 1 866 648 4638
Phone: [phone]
Fax: [phone]
Email: [email protected]

Box Includes
6
QuickStart Guide
USB Extension Cable
(FEX-20D only)
2 Micro/Nano to Mini
SIM card adapter sets
(FEX-40D only)
FEX-20D or FEX-40D
Mount Kit
1 Drill template
2 Self-tap anchors and long screws
2 Small assembly screws (FEX-20D)
Antennas
(FEX-40D only)
* Images are a representation of items in the box.
Power Adapter
(Optional Accessory)

7
Device Guide
Initial Setup and Installation
1. Connect the device to the network.
2. Assemble the hardware.
3. Configure the device.
4. Mount the device.

1Basic Connections
1. Connect the modem or SIM card:
FEX-20D: Insert your 3G/4G modem into the USB port on the device either directly or
using the provided USB extension adapter.
FEX-40D: Insert your 3G/4G LTE SIM card(s) into the ports labeled SIM1 and SIM2.
2. Insert the provided Ethernet cable into the LAN/POE port on the device.
3. Insert the other end of the Ethernet cable into the PoE LAN port on your FortiGate
appliance. FortiGate and FortiExtender must be on the same subnet.
4. Optionally, if you are not using PoE, connect the device to a power outlet using the
optional power adapter.
Optional Power
Connection
LAN/POE Internet
Warning: Adequate grounding must be provided to the PoE injector of the
FortiExtender unit if required, in compliance with your local electrical code or
regulations.
This device complies with IEEE 802.3af PoE specification. Do not use a PoE injector
that is not IEEE 802.3af compliant as it might damage your device.

9
Assembly
2
FEX-20D
1. Insert a supported 3G/4G modem
into the USB port on the device either
directly or using the provided USB
extension adapter.
2. Attach the cover:
a. Insert the front tabs.
b. Align the front lip.
c. Tilt back and secure the cover with
two machine screws.
Note: For the latest FortiExtender USB modem compatibility matrix please visit:
http://docs.fortinet.com/d/modem-compatibility-matrix

10
FEX-40D
1. Remove the dust cover that protects the SIM ports and fits over the antenna posts.
2. Insert your 3G/4G LTE SIM card(s) into the SIM ports. A Micro/Nano to Mini SIM card
adapter is provided. Observe these guidelines:
• If you install one SIM card, it can be inserted in either SIM port.
• If you install two SIM cards, SIM1 is the primary port and SIM2 is the secondary.
3. Press the SIM card in slot 1 as primary and slot 2 for backup link. Press again to
remove.
4. Reattach the cover and then attach the antennas.
Step 1
Step 4

11
Configuration
3
Conguring an IP address
After you have connected the FortiExtender network interfaces, the device automatically
attempts to obtain an IP address from a DHCP server. If you do not use DHCP, you can
configure a static IP address.
To configure a static IP address:
1. Use a network cable to connect the FortiExtender WAN/POE port to the Ethernet port
of your laptop.
2. Configure the laptop to be on the same subnet as FortiExtender by changing the
laptop IP address to 192.168.1.1 and the netmask to 255.255.255.0.
3. Open the laptop web browser to the default FortiExtender web UI address
http://192.168.1.2.
4. In both the username and password fields, type admin and press Enter.
5. Go to Network Configuration.
6. For address mode, select Static.
7. Specify the IP address, netmask, and gateway; and then click APPLY.

12
Updating FortiExtender rmware
You can find the version of the installed firmware on the FortiExtender web UI home page.
Note: You can also use the CLI to upgrade FortiExtender firmware, or you can
upgrade a FortiGate-managed FortiExtender unit from the FortiGate management
web UI. For details, see the FortiExtender release notes.
Fortinet periodically updates FortiExtender firmware. Check the Fortinet Customer Service
& Support website at https://support.fortinet.com to see if updates are available. If the
support site firmware download page shows a newer version than the one displayed on
the FortiExtender web UI home page, read the release notes and download the firmware.
To install and boot the new firmware:
1. Go to Firmware Upgrade.
2. Select Extender.
3. Use the controls to browse, select, and
upload the firmware file.
When you click the upload icon (up arrow),
the file is uploaded and the upgrade is
initiated. A green success message is
displayed when the process is complete.
4. Click RESTART NOW to boot the newly
installed firmware.

13
Updating SIM rmware (FEX-40D)
The firmware installed in the factory supports AT&T and Verizon 3G/4G LTE SIM cards.
If you have a SIM card for a different ISP, you can use the FortiExtender CLI or web UI to
update the firmware. Check the Fortinet Customer Service & Support website to see if a
firmware package is available for your ISP’s SIM card.
Before you begin:
You must download the appropriate firmware to your laptop. Depending on the package
you download and the instructions from your ISP, you might need to install a firmware file,
a carrier provisioning file (PRI), or both.
To install and boot the new firmware:
1. Go to Firmware Upgrade.
2. Select SIM1 Firmware or SIM2
Firmware to update the firmware for
respective slot.
3. Use the controls to browse, select,
and upload the firmware file.
When you click the upload icon (up
arrow), the file is uploaded and the
upgrade is initiated. A green success
message is displayed when the
process is complete.
4. Select SIM1 PRI or SIM2 PRI to
upload the carrier provisioning file for
the respective slot.
5. Click RESTART NOW to boot the
newly installed firmware.

14
Managing the FortiExtender device with FortiGate
FortiExtender requires no user configuration in most networks. Once linked, FortiGate can
automatically control the FortiExtender device and its modem via a CAPWAP tunnel.
To manage the FortiExtender device with FortiGate:
1. By default, configuration options for FortiExtender are hidden in the FortiGate web UI.
Use the following commands to enable it:
cong system global
set fortiextender enable
set wireless-controller enable
end
2. Use the following commands to allow CAPWAP on the port to which the FortExtender
unit is connected:
cong system interface
edit [port]
set allowaccess capwap
end
3. In the FortiGate web UI, go to System > Network > FortiExtender to display the status
and configuration page.
4. In the Administrative Status row, click Authorize.
5. After the device has been authorized, you can use FortiGate to monitor its status and
configure its settings. For details, see the FortiOS Handbook.

15
Mounting
4
The unit is designed for placement near a window (desk or wall mount) to achieve the
best 3G/4G signal.
Mounting holes
can be used with the
desk mount stand or
wall mounting
(bear claw screws).
Wall mounting holes
(long screws).
To use the stand
1. Attach the stand bracket to the mounting holes on the back of the FortiExtender unit.
2. Set the unit upright.

16
To hang on a wall with screws
1. Tape the drill template sticker to the wall in the desired location.
5. Position the device so the
mounting holes line up with the
screws.
6. Place the mounting slots over the
screws and slide the device down
until the screws fit into slots.
2. Use the template to mark and drill the pilot
holes.
3. Insert the anchors into the holes.
4. Insert the screws into the anchors and
tighten, but not all the way—leave around
a 5mm gap between the screw head and
the wall.
Tip: Use bear claw screws. The screw heads of bear claw screws have a built-in
gap that fits well with the hanging holes. You can purchase bear claw screws from a
local or online hardware store.

17
2. Use the template to mark and drill the pilot holes.
3. Insert the anchors into the holes.
4. Snap off the plastic cover over the
LEDs on the front to reveal the long
screw holes.
5. Insert the long screws through the
device from front to back.
To screw to a wall with long screws
1. Tape the drill template sticker to the wall in the desired location.

18
6. Insert the long screws into
the anchors on the wall and
tighten.
7. Replace the plastic cover over
the LEDs on the front.

19
1. USB
USB-A port for 3G/4G
modem.
3. Power
12V DC, 1.25A power
adapter connection.
Optional.
4. LAN/POE
RJ-45 port, 10/100/1000
Ethernet, PoE-PD
enabled, 802.3af/at
compliant, (15.4W).
5. Console
RJ-45 port.
1
3
4
5
FEX-20D
2
2. Reset Button
Press and hold to reset
the system to the factory
defaults

20
1
2
4
5
6
1. SIM1, SIM2
PCIe ports for primary and
secondary 3G/4G LTE SIM cards.
2. USB
Reserved for future use.
4. Power
12V DC, 1.25A power
adapter connection.
Optional.
5. LAN/POE
RJ-45 port, 10/100/1000
Ethernet, PoE-PD
enabled, 802.3af/at
compliant, (15.4W).
6. Console
RJ-45 port
FEX-40D
3
3. Reset Button
Press and hold to reset
the system to the factory
defaults