Description
Scope
Solution
On systems running FortiOS v5.2.1 and below, there is a field called Link Status located under System> Network > FortiExtender.
This status does not indicate that the physical link status to the FortiExtender is broken. Instead, it means that the CAPWAP tunnel between the FortiGate and the FortiExtender has not been established.
Equivalently, on systems running FortiOS 5.2.2 and above, there is a field called Status located under System> Network> FortiExtender.
This field is a combination of Administrative Status and Link Status in previous 5.2.0 and 5.2.1 builds. When you mouse-over the arrow, if the tooltip shows Offline, the CAPWAP tunnel between the FortiGate and FortiExtender is not established.
This status does not indicate that the physical link status to the FortiExtender is broken. Instead, it means that the CAPWAP tunnel between the FortiGate and the FortiExtender has not been established.
Equivalently, on systems running FortiOS 5.2.2 and above, there is a field called Status located under System> Network> FortiExtender.
This field is a combination of Administrative Status and Link Status in previous 5.2.0 and 5.2.1 builds. When you mouse-over the arrow, if the tooltip shows Offline, the CAPWAP tunnel between the FortiGate and FortiExtender is not established.
Scope
When the CAPWAP tunnel is not established, other symptoms may appear. For example:
1. Running any "exec extender ..." debug commands will return no results
2. Unable to login from the FortiGate to the FortiExtender CLI
3. Unable to upload new firmware to FortiExtender via FortiGate's CLI
1. Running any "exec extender ..." debug commands will return no results
2. Unable to login from the FortiGate to the FortiExtender CLI
3. Unable to upload new firmware to FortiExtender via FortiGate's CLI
Solution
1. Verify that the CAPWAP is enabled on the FortiGate interface to which the FortiExtender is connecting. Alternatively, the FortiGate interface can be configured as "Dedicated to Extension Device".
2. It is known that on certain pre-release versions of the FortiExtender (builds lower than FortiExtender v1.0 build0024), which were shipped with earlier versions of FortiExtender, the firmware is not compatible with FortiGate 5.2.x and above. It is recommended to upgrade the FortiExtender image manually.
3. Ensure there are no devices between the FortiGate and FortiExtender blocking the CAPWAP control port (25246 by default).
2. It is known that on certain pre-release versions of the FortiExtender (builds lower than FortiExtender v1.0 build0024), which were shipped with earlier versions of FortiExtender, the firmware is not compatible with FortiGate 5.2.x and above. It is recommended to upgrade the FortiExtender image manually.
3. Ensure there are no devices between the FortiGate and FortiExtender blocking the CAPWAP control port (25246 by default).
