FortiVoice Auto Provisioning for FortiFones on Different Subnets


When configuring FortiFone IP extensions on your FortiVoice system on a single LAN deployment, they will auto discover utilizing SIP PnP, in which a multicast is sent out on the network.

For networks using a different subnet for FortiFones than FortiVoice, the multicast won’t make it across the various subnets. In deployments using different subnets it is best to use HTTP or HTTPS with Option 66 configured on your DHCP server.

The HTTP and HTTPS protocols increase the reliability of the FortiFones being able to auto provision across the network, Option 66 set on the DHCP server creates an easy way to have all phones directed towards the FortiVoice in order to auto provision.

This recipe covers the best practices for a large deployment of FortiFones with the FortiVoice system.

This recipe recommends using firmware v5.3.17 or later.

Downloading and Editing the .csv File

First we’ll need to pre-configure all extensions within a supported .csv file. To download a .csv file from FortiVoice

  1. Go to Extensions > Extensions > IP Extensions.
  2. Select Import and then select Download sample.
  3. Open the newly downloaded .csv file.
  4. Complete the following sections in the .csv file: User ID, Extension, Display Name, Phone Type, and MAC Address.

The Phone Type must be entered as “FortiFone-XXX” where “XXX” is your model type (FortiFone-570, for example). To see a current list of FortiFone models, go to Phone System > Profiles > Phone. 

The MAC address column can be populated as “XX:XX:XX:XX:XX:XX” or “XXXXXXXXXXXX”. The FortiVoice automatically formats the MAC address once the .csv file is imported.

You’ll need to fill out the Phone profile section as well if you’ve created a custom phone profile and are using the default settings.





Importing the .csv File

With the .csv file downloaded and configured, we can now import the .csv file into FortiVoice.

To import the .csv file

  1. Go to Extensions > Extensions > IP Extensions.
  2. Select Import.
  3. Select Choose File.
  4. Select the previously configured .csv file and select OK.
  5. Review the information in the popup window. If the Phone Type is incorrect, it will display as “Generic”. Once you’re finished reviewing that the information is correct, select Import.

Configuring HTTP or HTTPS Protocol Support

With the .csv file imported, we should now make sure FortiVoice is configured to support HTTP or HTTPS protocol.

  1. Go to System > Network > Network.
  2. Select the Network Port being used and then select Edit.
  3. Ensure either HTTP or HTTPS is checked and then select OK.
  4. Go to Phone System > Profiles > Location.
  5. Select “internal” and then select Edit.
  6. Select either HTTP or HTTPS from the Phone provision protocol dropdown menu.
  7. Select OK.
  8. In your DHCP server, program Option 66 with the protocol to use, FortiVoice IP address, protocol port number and provisioning  folder (For example: HTTP:// When programming the auto provisioning server address keep the following things in mind:
    – HTTP uses port 80 on the FortiVoice by default. 
    – HTTPS uses port 443 on the FortiVoice by default. 
    – The protocol ports can be changed on the FortiVoice by going to System > Configuration > Options. Make note of any protocol port changes made on the FortiVoice.
  9. Connect the FortiFones to the network or reboot them if already connected.