Fortinet FortiWiFi FortiWiFi-60 Administration Manual page 130

Update center
130
The FortiWiFi unit sends the SETUP message if you change the WAN1 IP address
manually or if you have set the WAN1 interface addressing mode to DHCP or PPPoE
and your DHCP or PPPoE server changes the IP address.
If you have redundant connections to the Internet, the FortiWiFi unit also sends the
SETUP message when one Internet connection goes down and the FortiWiFi unit fails
over to the other Internet connection.
In Transparent mode if you change the management IP address, the FortiWiFi unit
also sends the SETUP message to notify the FDN of the address change.
Enabling push updates through a NAT device
If the FDN can connect to the FortiWiFi unit only through a NAT device, you must
configure port forwarding on the NAT device and add the port forwarding information
to the push update configuration. Using port forwarding, the FDN connects to the
FortiWiFi unit using either port 9443 or an override push port that you specify.
Note: You cannot receive push updates through a NAT device if the external IP address of the
NAT device is dynamic (for example, set using PPPoE or DHCP).
General procedure
Use the following steps to configure the FortiWiFi NAT device and the FortiWiFi unit
on the internal network so that the FortiWiFi unit on the internal network can receive
push updates:
1 Add a port forwarding virtual IP to the FortiWiFi NAT device.
2 Add a firewall policy to the FortiWiFi NAT device that includes the port forwarding
virtual IP.
3 Configure the FortiWiFi unit on the internal network with an override push IP and port.
Note: Before completing the following procedure, you should register the internal network
FortiWiFi unit so that it can receive push updates.
To add a port forwarding virtual IP to the FortiWiFi NAT device
Configure a FortiWiFi NAT device to use port forwarding to forward push update
connections from the FDN to a FortiWiFi unit on the internal network.
1 Go to Firewall > Virtual IP.
2 Select Create New.
3 Type a name for the virtual IP.
4 In the External Interface section, select the external interface that the FDN connects
to.
5 In the Type section, select Port Forwarding.
6 In the External IP Address section, type the external IP address that the FDN
connects to.
7 Type the External Service Port that the FDN connects to.
01-28006-0014-20041105
System maintenance
Fortinet Inc.