Fortinet FortiExtender 511G
Extend, Ensure, and Secure Your Network with 5G/LTE Gateways

Superior Management, Security, and Control

FortiExtender is a plug-and-play device. Once connected to a FortiGate, either directly or remotely over VxLAN, FortiExtender appears as a regular network interface in FortiOS management. IT administrators can manage the connection and implement advanced protection from FortiGuard, just like any other FortiGate interface.

Flexible Deployment for Optimal Signal Strength

FortiExtender devices removed the need for lengthy, expensive, and lossy antenna cables. FortiExtender utilizes Power over Ethernet (PoE) so you can run a high-quality Ethernet cable up to 100 meters away from the FortiGate or network switch where there is optimal 5G/LTE signal. Certain FortiExtender models also support SFP ports, so that you can deploy the device over 100 meters away from the FortiGate or network switch.

5G/LTE Wireless WAN

FortiExtender supports dual-SIM and dual-modem options, enabling up to four different ISPs for ultra-reliable connectivity. Dual-SIM models enable active/passive cellular for failover based on data plan, disconnects, signal strength, and link health, allowing you to balance connectivity quality and cost. Dual-Modem provides active/active cellular links for high-availability, traffic isolation, and load-balancing use cases. Failover configuration options for Dual-SIM FortiExtender include.

Wired WAN Connectivity

FortiExtender offers WAN connectivity options with an Ethernet WAN port, in addition to 5G/LTE Wireless WAN links. With this wired WAN port, you can connect a DSL, cable, or another modem for additional WAN connectivity. Load-balancing and failover options enable your FortiExtender to manage your WAN connections across several options to ensure optimal connectivity and cost.

LAN Connectivity

FortiExtender offers multiple LAN Ethernet ports to enable multiple connections at the Wireless WAN site. Ideal for High Availability (HA) pairs of FortiGates, each FortiGate can be directly connected to the FortiExtender. Either FortiGate can run in load-balancing or failover modes and receive WAN connectivity from the FortiExtender.

VxLAN Extension

You don’t need a FortiGate on site to deploy AI-powered security with your FortiExtender. Enhanced LAN Extension in FortiExtender creates a network fabric using VxLAN technology where you can extend the Layer 2 broadcast domain of a remote FortiGate to the standalone FortiExtender with no extra license needed. Depending on the FortiGate model, Enhanced LAN Extension supports over 1,000 FortiExtenders per firewall.

Virtual Routing Redundancy Protocol (VRRP)

In branch environments where a high-availability (HA) pair of FortiGates is not possible, FortiExtender supports VRRP to offer HA alongside a single FortiGate. When plugged into a FortiGate, FortiExtender acts as a passive IP passthrough device to the FortiGate. In the event of a FortiGate failure, FortiExtender will take over as the master NAT firewall, offering uninterrupted connectivity for enhanced business continuity. When the FortiGate is restored, FortiExtender returns to its passive role.

Private 5G/LTE (CBRS)

All FortiExtender 5G/LTE models support CBRS in either the form of LTE Band 48 or 5G N48. This allows FortiExtender to play a critical role in Private 5G/ LTE deployments as a rapid secure uplink at the edge. When equipped with a Private 5G/LTE SIM card, FortiExtenders can also receive CBRS signal from Private 5G/LTE Access Points to deployed on Automated Guided Vehicles (AGVs), Autonomous Mobile Robots (AMRs), or as virtual LAN mobile zones in parking lots, pop-up tents, and more.