FortiExtender v2.0.0 Release Notes FortiExtender v2.0.0 Release Notes November 21, 2014 36-200-258288-20141121 Copyright© 2014 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations,and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

Fortinet Document Library docs.fortinet.com Fortinet Video Library video.fortinet.com Customer Service & Support support.fortinet.com Training Services training.fortinet.com FortiGuard fortiguard.com Document Feedback [email protected] Table of Contents

Change Log...... 4 Introduction...... 5 Supported models ...... 5 What’s new in FortiExtender v2.0.0...... 5 Special Notices...... 6 Access point name ...... 6 Novatel 551L (Verizon) and Ovation MC679 (Bell Canada) USB modems...... 6 Netgear AirCard 340U (AT&T) USB modem ...... 6 FortiExtender peak performance ...... 6 Upgrade Information...... 7 Upgrading from FortiExtender v1.0.0 ...... 7 Firmware upgrade procedure ...... 7 Firmware image checksums ...... 7 Product Integration and Support ...... 8 Modes of operation...... 8 Connected UTM mode ...... 8 Standalone mode...... 8 FortiExtender v2.0.0 support ...... 9 USB modem support...... 9 Resolved Issues...... 12 Known Issues...... 13 Limitations...... 14

Page 3 Change Log

Date Change Description

2014-11-18 Initial release.

2014-11-21 Minor document update.

Page 4 Introduction

This document provides the following information for FortiExtender v2.0.0 build 0003: • Supported models • What’s new in FortiExtender v2.0.0 • Special Notices • Upgrade Information • Product Integration and Support • Resolved Issues • Known Issues • Limitations For more information on your FortiExtender device, see the FortiExtender Administration Guide available in the Fortinet Document Library.

Supported models

FortiExtender v2.0.0 supports the following models: FEX-20B, FEX-100A-VZW, and FEX-100B.

What’s new in FortiExtender v2.0.0

The following is a list of new features and enhancements in FortiExtender v2.0.0. • Speed improvements for all models • FEX-100B OS upgrade from Linux OS 2.6.31.8 to 3.14.12 in order to support various USB modems. • Point-to-Point Protocol (PPP) modem support.

Page 5 Special Notices

This section highlights some of the operational changes that administrators should be aware of in v2.0.0.

Access point name

In v2.0.0 and later you must configure the access point name (APN) for your FEX-100A. For example, “vzwinternet” or the APN that was provided by Verizon.

Novatel 551L (Verizon) and Ovation MC679 (Bell Canada) USB modems

The Novatel 551L (Verizon) and Ovation MC679 (Bell Canada) modems have mechanical issues with its USB male connector. These modems cannot operate correctly when sealed inside the FortiExtender case.

Netgear AirCard 340U (AT&T) USB modem

The Netgear 340U (AT&T) modem requires a 3 foot USB cable to operate correctly.

FortiExtender peak performance

FortiExtender peak performance is achieved with FortiGate 100D series and above.

Page 6 Upgrade Information

Upgrading from FortiExtender v1.0.0

FortiExtender v2.0.0 officially supports upgrade from v1.0.0.

Firmware upgrade procedure

You can upgrade your device from the Web-based Manager, the Command Line Interface (CLI), the FortiGate Web-based Manager, the FortiGate CLI, or the FortiManager Web-based Manager. This section covers the most common upgrade methods.

Firmware upgrade via the FortiGate Web-based Manager: 1. In the FortiGate Web-based Manager, go to System > Network > FortiExtender. In the Administrative Status field of the connected FortiExtender, select Authorize. 2. After the FortiExtender is authorized, refresh the web page. 3. In the OS Version field of the connected FortiExtender, select Upgrade. The Upgrade FortiExtender Firmware dialog box is displayed. 4. Browse for the firmware image file on your management computer and select OK. Please wait for the firmware upgrade to complete. The upgrade procedure can take 3 to 5 minutes to finish. Upon completion, perform a refresh of the web page to verify the firmware upgrade is successful and the OS Version field reflects the build of the upgraded image.

Firmware upgrade via the FortiExtender Web-based Manager: 1. Connect the FortiExtender unit to a separate private switch or hub, or directly to your management computer via a cross-over cable. 2. Configure the management computer to be on the same subnet as in the internal interface of the FortiExtender unit by changing the IP address of the management computer to 192.168.1.1 and the netmask to 255.255.255.0. 3. Start a supported web browser and browse to 192.168.1.2. 4. Type admin in the Name and Password fields, then press Enter. 5. In the FortiExtender Web-based Manager, go to System > Firmware. 6. Click the Choose File button and browse for the firmware image file on your management computer. Please wait for the firmware upgrade to complete. The upgrade procedure can take 3 to 5 minutes to finish. Upon completion, perform a refresh of the web page to verify the firmware upgrade is successful. Go to System > Firmware > Firmware Version to confirm the page reflects the build of the upgraded image.

Firmware image checksums

The MD5 checksums for all Fortinet software and firmware releases are available at the Fortinet Customer Service & Support portal located at https://support.fortinet.com. After logging in select Download > Firmware Image Checksums, enter the image file name including the extension, and select Get Checksum Code.

Page 7 Product Integration and Support

Modes of operation

FortiExtender supports two modes of operation.

Connected UTM mode

This is the default mode of operation where the FortiGate provides centralized management of the FortiExtender infrastructure. In this mode FortiExtender discovers the FortiGate using the CAPWAP protocol and WAN traffic is tunneled to the FortiGate’s wireless WAN virtual interface. For connect UTM mode, FortiGates must run FortiOS v5.2.0 or later.

To set CAPWAP mode from the FortiExtender command line interface, enter the following command: ext_cli --conn-mode capwap The FortiExtender will reboot and operate in CAPWAP mode.

Standalone mode

In this mode of operation, any device (e.g: PC or FortiGate) can be connected to the FortiExtender. Wireless WAN traffic is then bridged to the Ethernet Interface of the FortiExtender allowing the device to get the IP address from the wireless service provider. This mode can be used for trial mode or small deployments since centralized management is not provided.

To set standalone mode from the FortiExtender command line interface, enter the following command: ext_cli --conn-mode standalone The FortiExtender will reboot and operate in standalone mode.

A FortiGate is not required when the FortiExtender is in Standalone mode.

Page 8 FortiExtender v2.0.0 support

The following table lists v2.0.0 product integration and support information. Table 1: FortiExtender v2.0.0 support

Web Browsers • Microsoft Internet Explorer versions 10 and 11 • Mozilla Firefox version 33 Other web browsers may function correctly, but are not supported by Fortinet.

FortiOS/FortiOS Carrier • v5.2.0 and later

FortiManager • v5.0.7 and later • v5.2.0 and later

USB modem support

The following table lists USB modems that are supported by the FEX-20B and FEX-100B.

Table 2: Supported USB modems Alcatel-Lucent One Touch X020 MediaTek MT6276M Alcatel-Lucent One Touch X030 MediaTek WiMAX USB Card Alcatel-Lucent OT X220L Micromax MMX 300c Alcatel-Lucent OT-X080C MobiData MBD-200HU Alcatel-Lucent OT-X220D Netgear (Sierra AirCard 313U Wireless) Alcatel-Lucent X060S Netgear (Sierra AirCard 340U Wireless) Alcatel-Lucent X200 Netgear (Sierra AirCard 341U Wireless) Alcatel-Lucent X215S Netgear WNDA3200 Alcatel-Lucent X215S Novatel Wireless MC760 3G Alcatel-Lucent T930S Novatel WirelessMC990D Alcatel-Lucent ASB TL131 TD-LTE Novatel Wireless MC996D A-Link 3GU Novatel WirelessU727 AnyDATA ADU-500A Novatel WirelessU760 AnyDATA ADU-510A Novatel Wireless MC545 AnyDATA ADU-510L Novatel Wireless Merlin XU950D AnyDATA ADU-520A Novatel Wireless Ovation 930D AnyDATA APE-540H Novatel Wireless Ovation MC950D HSUPA Axesstel MU130 Novatel Wireless Ovation USB551L BandLuxe C120 Novatel Wireless U679 Turbo Stick BandRich BandLuxe C170 Olivetti Olicard 100 BandRich BandLuxe C270 Olivetti Olicard 145 BandRich BandLuxe C339Onda MT503HS

Product Integration and Support Page 9 FortiExtender v2.0.0 Release Notes Table 2: Supported USB modems (continued) Beceem BCSM250 Onda MT505UP Celot CT-680 Onda MT8205 LTE Celot K-300 Onda MW833UP Changhong CH690 Onda MW833UP TeleCom CBP7.0 Onda MW836UP-K C-motech CDU-680 Onda TM201 C-motech CDU-685a Onda WM301 C-motech CGU-628 Option Beemo C-motech CHU-628S Option GI0643 C-motech CHU-629S Option Globetrotter C-motech D-50 Option GlobeTrotter GI1515 Digicom 8E4455 Option iCon 461 D-Link DWM-156 Option iCon 711 D-Link DWM-162-U5 Pantech / UTStarcom UMW190 D-Link DWR-510 Pantech P4200 LTE EpiValley SEC-7089 Pantech UML290 Exiss Mobile E-190 series Pantech UML295 Franklin Wireless CGU-628A Samsung GT-B1110 Franklin Wireless U210 Samsung GT-B3730 Franklin Wireless U600 Samsung SGH-Z810 GW D301 Samsung U209 CE 100 Sierra Wireless AirCard 313, 320U Haier CE682 (EVDO) Sierra Wireless AirCard 880U E1550 Sierra Wireless AirCard 881U Huawei E1612 Sierra Wireless Compass 597 Huawei E169 Solomon S3Gm-660 Huawei E1690 Sony Ericsson MD300 Huawei E1692 Sony Ericsson MD400 Huawei E171 Sony Ericsson MD400G Huawei E173 SpeedUp SU-8000U Huawei E1750 Toshiba G450 Huawei E1762 TP-Link MA180 Huawei E177 TP-Link MA260 Huawei E180 UTStarcom UM175 Huawei E1820 UTStarcom UM185E Huawei E270+ ZTE 6535-Z Huawei E3251 ZTE A371B Huawei E3276s-151 ZTE AC2710 Huawei E352 ZTE AC2726 Huawei E353 ZTE AC581 Huawei E355s-1 ZTE AC682

Product Integration and Support Page 10 FortiExtender v2.0.0 Release Notes Table 2: Supported USB modems (continued) Huawei E535 ZTE AC8710 Huawei E587 ZTE AX226 WiMAX Huawei E630 ZTE K3520-Z Huawei EC156 ZTE K3565 Huawei EC168C ZTE K3805-Z Huawei ET302 ZTE MF100 Huawei ET8282 ZTE MF110 Huawei GP02 ZTE MF112 Huawei K3765 ZTE MF190 Huawei K3770 ZTE MF190J Huawei K3771 ZTE MF192 Huawei K3772 ZTE MF196 Huawei K3773 ZTE MF620 Huawei K4305 ZTE MF622 Huawei K4505 ZTE MF626 Huawei K4605 ZTE MF628 Huawei R201 ZTE MF633 Huawei U7510 ZTE MF636 Huawei U7517 ZTE MF637 Huawei U8110 ZTE MF638 Huawei U8220 ZTE MF652 Huawei U8300 ZTE MF656A I-O Data WMX2-U WiMAX ZTE MF668A JOA Telecom LM-700r ZTE MF669 KDDI (Huawei) HWD12 LTE ZTE MF671 Kyocera W06K ZTE MF680 LG AD600 ZTE MF691 (T-Mobile Rocket 2.0) LG HDM-2100 ZTE MF820 4G LTE LG L-02C LTEZTE MF821 LG L-03D ZTE MF821D LG L-05A ZTE MU351 LG L-07A LG L-08C LG LDU-1900D LG LUU-2100TI (AT&T USBConnect Turbo) LG SD711 Mediatek MT6229

Product Integration and Support Page 11 FortiExtender v2.0.0 Release Notes Resolved Issues

There are no resolved issues that have been fixed in v2.0.0. For inquires about a particular bug, please contact Customer Service & Support.

Page 12 Known Issues

The following issues have been identified in v2.0.0. For inquires about a particular bug, please contact Customer Service & Support. Table 3: Known issues

Description

After authorizing the FortiExtender on a FortiGate, if you connect to a different FortiGate the FortiExtender must be authorized again. All settings must be re-configured after connecting to the new FortiGate.

PPP based modems that do not have multiple control ports do not provide the real-time signal related statistics when the data connection is active on the FortiExtender.

Page 13 Limitations

The items in this section generally refer to hard limitations for which there are no feasible solutions or planned remedies. Table 4: Limitations

Limitation Description

Hardware The FEX-100B does not support hot plugging USB modems. The Limitation FEX-100B must be rebooted after the USB modem is connected.

Hardware The Novatel 551L USB modem can, at times, disconnect and re-connect Limitation resulting in connection drops. Workaround: Use the supplied USB cable.

Hardware Sierra Wireless AirCard 313U & Netgear AirCard 340U: These modems Limitation sometimes cause interference on the USB bus, resulting in the modem not operating properly. Workaround: Use the supplied USB cable.

System Limitation USB modem firmware upgrades are currently not supported. The USB modem firmware must be updated via your management computer.

Page 14