Fortinet FortiExtender 511G
Extend, Ensure, and Secure Your Network with 5G/LTE Gateways
Sorry, this product is no longer available, please contact us for a replacement.
Click here to jump to more pricing!
Overview:
The FortiExtender 511G Interface offers an SFP port for fiber cabling deployments greater than 100 meters away from the FortiGate or network switch, as well as console and USB 2.0 ports for out of band management (OOB).
Extend, Ensure, and Secure Your Network
FortiExtender indoor 5G/LTE gateways offer scalable, secure, and resilient connectivity for enterprise networks. Driven by Fortinet’s unique approach of Secure Networking, FortiExtender allows organizations business continuity, improved network availability while securing connectivity with wired broadband and cellular networks.
From secure point of sale (POS) systems, to factories, healthcare facilities, microbranches, and kiosks— FortiExtender provides reliable broadband access to the internet and extends the value of the Fortinet Security Fabric to support fluid business operations dependent on remote device connectivity.
Highlights
- Improves network uptime
- Extends the network edge
- Provides out of band management (OOB)
- Integrates with Fortinet Secure SD-WAN
- Enables network fabrics with VxLAN extension
- Cloud management and on-premises management options
- Rich interface for multiple LAN and WAN connections
- Small form-factor for easy deployment and optimal cellular signal
Features:
Superior Management, Security, and Control
FortiExtender is a plug-and-play device. Once connected to a FortiGate, either directly or remotely over VxLAN, FortiExtender appears as a regular network interface in FortiOS management. IT administrators can manage the connection and implement advanced protection from FortiGuard, just like any other FortiGate interface.
Flexible Deployment for Optimal Signal Strength
FortiExtender devices removed the need for lengthy, expensive, and lossy antenna cables. FortiExtender utilizes Power over Ethernet (PoE) so you can run a high-quality Ethernet cable up to 100 meters away from the FortiGate or network switch where there is optimal 5G/LTE signal. Certain FortiExtender models also support SFP ports, so that you can deploy the device over 100 meters away from the FortiGate or network switch.
5G/LTE Wireless WAN
FortiExtender supports dual-SIM and dual-modem options, enabling up to four different ISPs for ultra-reliable connectivity. Dual-SIM models enable active/passive cellular for failover based on data plan, disconnects, signal strength, and link health, allowing you to balance connectivity quality and cost. Dual-Modem provides active/active cellular links for high-availability, traffic isolation, and load-balancing use cases. Failover configuration options for Dual-SIM FortiExtender include.
Wired WAN Connectivity
FortiExtender offers WAN connectivity options with an Ethernet WAN port, in addition to 5G/LTE Wireless WAN links. With this wired WAN port, you can connect a DSL, cable, or another modem for additional WAN connectivity. Load-balancing and failover options enable your FortiExtender to manage your WAN connections across several options to ensure optimal connectivity and cost.
LAN Connectivity
FortiExtender offers multiple LAN Ethernet ports to enable multiple connections at the Wireless WAN site. Ideal for High Availability (HA) pairs of FortiGates, each FortiGate can be directly connected to the FortiExtender. Either FortiGate can run in load-balancing or failover modes and receive WAN connectivity from the FortiExtender.
VxLAN Extension
You don’t need a FortiGate on site to deploy AI-powered security with your FortiExtender. Enhanced LAN Extension in FortiExtender creates a network fabric using VxLAN technology where you can extend the Layer 2 broadcast domain of a remote FortiGate to the standalone FortiExtender with no extra license needed. Depending on the FortiGate model, Enhanced LAN Extension supports over 1,000 FortiExtenders per firewall.
Virtual Routing Redundancy Protocol (VRRP)
In branch environments where a high-availability (HA) pair of FortiGates is not possible, FortiExtender supports VRRP to offer HA alongside a single FortiGate. When plugged into a FortiGate, FortiExtender acts as a passive IP passthrough device to the FortiGate. In the event of a FortiGate failure, FortiExtender will take over as the master NAT firewall, offering uninterrupted connectivity for enhanced business continuity. When the FortiGate is restored, FortiExtender returns to its passive role.
Private 5G/LTE (CBRS)
All FortiExtender 5G/LTE models support CBRS in either the form of LTE Band 48 or 5G N48. This allows FortiExtender to play a critical role in Private 5G/ LTE deployments as a rapid secure uplink at the edge. When equipped with a Private 5G/LTE SIM card, FortiExtenders can also receive CBRS signal from Private 5G/LTE Access Points to deployed on Automated Guided Vehicles (AGVs), Autonomous Mobile Robots (AMRs), or as virtual LAN mobile zones in parking lots, pop-up tents, and more.
Specifications:
| FortiExtender 511G | FortiExtender 511G-WiFi | |
|---|---|---|
| Hardware Specifications | ||
| Modem Support | 5G Sub-6GHz module EM9291 | 5G Sub-6GHz module EM9291 |
| Number of Antennas | 4x 5G/LTE/GNSS Antennas | 4x 5G/LTE/GNSS Antennas, 2x Wi-Fi Antennas |
| Power over Ethernet (PoE) Powered | 1x Port4 | 1x Port4 |
| Ethernet Ports | 1-WAN2.5G, 1x SFP+RJ45 Combo 1G WAN, 3x 1G LAN | 1-WAN2.5G, 1x SFP+RJ45 Combo 1G WAN, 3x 1G LAN |
| USB Ports | 1x USB 2.0 | 1x USB 2.0 |
| Bluetooth | BLE 5.0+ | BLE 5.0+ |
| GPS Antenna Port | Shared with 5G/LTE RF port1 | Shared with 5G/LTE RF port1 |
| Mounting Options | Desktop/Wall-Mounted | Desktop/Wall-Mounted |
| Type | Indoor | Indoor |
| Dimensions | ||
| Height x Width x Length (inches) | 1.27 x 8.98 x 5.83 | 1.27 x 8.98 x 5.83 |
| Height x Width x Length (mm) | 31 x 228 x 148 | 31 x 228 x 148 |
| Weight | Device (Net weight): 1.0 kg (2.3 lb) Package (Gross weight): 1.8 kg (4.0 lb) |
Device (Net weight): 1.1 kg (2.4 lb) Package (Gross weight): 1.9 kg (4.2 lb) |
| Environment | ||
| Power Required | 25.5 W (PoE at) | 25.5 W (PoE at) |
| Power Consumption (Average) | 13.8 W | 18.8 W |
| Power Consumption (Maximum) | 18.0 W | 22.5 W |
| Operating Temperature | 32°F to 104°F (-0°C to 40°C) | 32°F to 104°F (-0°C to 40°C) |
| Storage Temperature | -4°F to 158°F (-20°C to 70°C) | -4°F to 158°F (-20°C to 70°C) |
| Humidity | 5% to 95% RH non-condensing | 5% to 95% RH non-condensing |
| Certification and Compliance | ||
| FCC | FCC Part 15B, 15C, 2.1091 | FCC Part 15B, 15C, 15E, 2.1091 |
| IC | ICES-003, RSS-247, RSS-102 | ICES-003, RSS-247, RSS-102 |
| CE | EMC 2014/30/EU (EN 55032, EN 55035, EN 61000-3-2/-3-3; EN 301 489-1/-17/-19/-52) RED 2014/53/EU (EN 300 328, EN 303 413, EN 301 908‑1/‑2/‑13/‑25, EN IEC 62311) LVD 2014/35/EU (EN 62368-1) |
EMC 2014/30/EU (EN 55032, EN 55035, EN 61000-3-2/-3-3; EN 301 489-1/-17/-19/-52) RED 2014/53/EU (EN 300 328, EN 301 893, EN 300 440, EN 303 413, EN 301 908-1/-2/-13/-25, EN IEC 62311) LVD 2014/35/EU (EN 62368-1) |
| UL | UL/CSA 62368-1 | UL/CSA 62368-1 |
| CB | IEC/EN 62368-1 | IEC/EN 62368-1 |
| Regional Compatibility | ||
| FCC Part 15B, 15C, 2.1091 | FCC Part 15B, 15C, 15E, 2.1091 | |
| Internal Modem Specifications | ||
| Modem Model | EM9291 | EM9291 |
| 5G NR SA and NSA * | n1, n2, n3, n5, n7, n8, n12, n13, n14, n18, n20, n25, n26, n28, n29, n30, n38, n40, n41, n48, n66, n70, n71, n75, n76, n77, n78, n79 | n1, n2, n3, n5, n7, n8, n12, n13, n14, n18, n20, n25, n26, n28, n29, n30, n38, n40, n41, n48, n66, n70, n71, n75, n76, n77, n78, n79 |
| 4G: LTE * | B1, B2, B3, B4, B5, B7, B8, B12, B13, B14, B17, B18, B19, B20, B25, B26, B28, B29, B30, B32, B34, B38, B39, B40, B41, B42, B43, B46, B48, B66, B71 | B1, B2, B3, B4, B5, B7, B8, B12, B13, B14, B17, B18, B19, B20, B25, B26, B28, B29, B30, B32, B34, B38, B39, B40, B41, B42, B43, B46, B48, B66, B71 |
| 3G: UMTS/HSPA+ * | B1, B2, B4, B5, B8, B19 | B1, B2, B4, B5, B8, B19 |
| 3G: WCDMA * | B1, B2, B4, B5, B8, B19 | B1, B2, B4, B5, B8, B19 |
| Additional Ports | — | — |
| Connector Type | 4x SMA (MAIN, MIMO1/GPS, MIMO2, MIMO3) | 2x Wi-Fi (RP-SMA), 4x SMA (MAIN, MIMO1/GPS, MIMO2, MIMO3) |
| Diversity | Yes | Yes |
| MIMO | Yes | Yes |
| GNSS Bias | NA | NA |
Software Features:
| Feature | FortiExtender 511G | FortiExtender 511G-WiFi |
|---|---|---|
| Advanced Radio Technology | ||
| 2x2 MIMO — enables industry leading data speeds | ||
| 4x4 MIMO — enables industry leading data speeds | ||
| 5G Downlink 4x4 MIMO bands ** n1, n2, n3, n7, n25, n30, n38, n39, n40, n41, n48, n66, n70, n75, n76, n77, n78, n79 |
||
| 5G Uplink 2 × 2 MIMO Band ** n38, n41, n48, n77, n78, n79 |
||
| LTE Downlink 4 × 4 MIMO bands ** B1, B2, B3, B4, B7, B25, B30, B32, B38, B39, B40, B41, B42, B43, B48, B66, B70 |
||
| Receiver Diversity — improves performance at cell edges and in buildings | ||
| Dual Modem | — | — |
| 2x2 2.4G/5 GHz concurrent Wi‑Fi 6 (802.11ax) | — | |
| Advanced Software Features | ||
| Connection Status | ||
| Auto‑connect | ||
| Auto‑select Network | ||
| Data Byte Count | ||
| Network Profile | ||
| Self‑diagnostics | ||
| Power Management — standby and hibernate selective suspend | ||
| DIAG and AT Commands | ||
| Private IP SIM Support | ||
| L2 Tunnel Mode via VLAN or CAPWAP for fast and flexible deployments | ||
| Single Pane of Glass Management via FortiGate and FortiManager | ||
| SIM Features | ||
| Dual‑SIM Support with intelligent fail‑over algorithms | ||
| SIM Size: Micro‑SIM type 3FF | ||
| SIM Security Cover | ||
| IMEI printed at bottom of enclosure for ease of activation | ||
| eSIM | In‑progress | In‑progress |
| Bandwidth Information | ||
| IPsec VPN Throughput (Wired) | 920 Mbps | 920 Mbps |
| IPsec VPN Throughput (5G/LTE) | 400 Mbps | 400 Mbps |
| Lan‑Extension Throughput | 600 Mbs | 600 Mbs |
| LAN‑LAN Layer‑2 Frames Throughput | 950 Mbps | 950 Mbps |
| LAN‑WAN NAT’ed Layer‑3 IP Packets Throughput | 900 Mbps | 900 Mbps |
| Max WAN Uplinks Supported | 1 | 1 |
| Carrier Certifications | ||
| Verizon | In-progress | In-progress |
| ATT | ||
| PTCRB | ||
| T-Mobile | In-progress | In-progress |
| Public Safety Network | FirstNet Capable | FirstNet Capable |
* Applies to AM model only.
** Supported frequency bands are contingent upon the modem vendor’s firmware integrity, the Fortinet software version deployed, and carrier-specific configurations. Fortinet makes no guarantees regarding continued compatibility of bands across all carriers, FortiExtender hardware or software versions.
Documentation:
Download the Fortinet FortiExtender 5G/LTE Gateways Datasheet (PDF).
Pricing Notes:
- FortiCare Premium Support
FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades - Router Bundle
Router Bundle (includs FortiCare Premium and SD-WAN) - Standard Bundle
Standard Bundle (includes FortiCare Premium, SD-WAN and Firewall) - Prices are for one year of Premium RMA support. Usual discounts can be applied.
- Annual contracts only. No multi-year SKUs are available for these services.
- Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
- Pricing and product availability subject to change without notice.