![]() ![]() ![]() This configuration is useful for the following situations: FortiAP local bridging (Private cloud-managed AP)Ī FortiAP unit can provide WiFi access to a LAN, even when the wireless controller is located remotely. To provide access to other networks, create appropriate firewall policies between the software switch and other interfaces. The configuration described above provides communication between WiFi and wired LAN users only. For example, to assign the homenet_if interface to VLAN 100, enter:Ĭonfig wireless-controller vap edit “homenet_if” set vlanid 100 If your environment uses VLAN tagging, you assign the SSID to a specific VLAN in the CLI. Add the permitted User Groups.Ĭonfig system interface edit homenet_nw set ip 172.16.96.32 255.255.255.0 set type switch set security-mode captive-portal set security-groups “Guest-group”Ĭonfig system interface edit homenet_nw set member “homenet_if” “internal” endįortiAP local bridging (Private cloud-managed AP) VLAN configuration Select Manual and enter an address, for example 172.16.96.32/255.255.255.0Įnable and configure an address range for clients. Go to Network > Interfaces and select Create New > Interface.Ī name for the new interface, homenet_nw for example.Īdd homenet_if and the internal network interface.To configure the FortiGate software switch – web-based manager This example creates a WiFi interface “homenet_if” with SSID “homenet” using WPA-Personal security, passphrase “Fortinet1”.Ĭonfig wireless-controller vap edit “homenet_if” set vdom “root” set ssid “homenet” set security wpa-personal set passphrase “Fortinet1”Ĭonfig wireless-controller wtp edit FAP22B3U11005354 set admin enable set vaps “homenet_if” The FortiAP unit can carry regular SSIDs in addition to the Bridge SSID. Go to WiFi & Switch Controller > Managed FortiAPs, select the FortiAP unit for editing.The SSID visible to users, homenet for example.Ĭonfigure security as you would for a regular WiFi network. Go to WiFi & Switch Controller > SSID and select Create New.Ī name for the new WiFi interface, homenet_if for example.To configure the SSID – web-based manager l Configure Captive Portal security for the software switch interface. Configure a software switch interface on the FortiGate unit with the WiFi and internal network interface as members.Configure the SSID so that traffic is tunneled to the WiFi controller.To create the WiFi and wired LAN configuration, you need to: Note that software switches are only available if your FortiGate is in Interface mode. This is a convenient configuration for users. Using bridged FortiAPs to increase scalability Combining WiFi and wired networks with a software switchĪ WiFi network can be combined with a wired LAN so that WiFi and wired clients are on the same subnet. Combining WiFi and wired networks with a software switchįortiAP local bridging (Private cloud-managed AP) ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |