Fortinet Document Library

Version:

Version:


Table of Contents

FortiWiFi and FortiAP Configuration Guide

Download PDF
Copy Link

Configuring a FortiWiFi unit as a wireless client

To set up the FortiWiFi unit as a wireless client, you must use the CLI. Before you do this, make sure to remove any AP WiFi configurations such as SSIDs, DHCP servers, and policies.

To configure wireless client mode
  1. Change the wireless mode to client. In the CLI, enter the following commands:

    config system global

    set wireless-mode client

    end

  2. Respond “y” when asked if you want to continue. The FortiWiFi unit reboots.
  3. Configure the WiFi interface settings.

    For example, to configure the client for WPA-Personal authentication on the our_wifi SSID with passphrase justforus, enter the following in the CLI:

    config system interface

    edit wifi

    set mode dhcp

    config wifi-networks

    edit 0

    set wifi-ssid our_wifi

    set wifi-security wpa-personal

    set wifi-passphrase "justforus"

    end

    end

     

    The WiFi interface client_wifi receives an IP address using DHCP.

  4. Configure a WiFi to port1 policy.
    You can use either CLI or GUI to do this. The important settings are:
  5. Incoming Interface (srcintf)

    wifi

    Source Address (srcaddr)

    all

    Outgoing Interface (dstintf)

    port1

    Destination Address (dstaddr)

    all

    Schedule

    always

    Service

    ALL

    Action

    ACCEPT

    Enable NAT

    Selected

Controlled AP selection support in FortiWiFi client mode

Use the following CLI commands to provide a more controlled AP selection method (supported in FortiWiFi client mode).

Syntax

config system interface

edit {name}

set wifi-ap-band {any | 5g-preferred | 5g-only}

next

end

Configuring a FortiWiFi unit as a wireless client

To set up the FortiWiFi unit as a wireless client, you must use the CLI. Before you do this, make sure to remove any AP WiFi configurations such as SSIDs, DHCP servers, and policies.

To configure wireless client mode
  1. Change the wireless mode to client. In the CLI, enter the following commands:

    config system global

    set wireless-mode client

    end

  2. Respond “y” when asked if you want to continue. The FortiWiFi unit reboots.
  3. Configure the WiFi interface settings.

    For example, to configure the client for WPA-Personal authentication on the our_wifi SSID with passphrase justforus, enter the following in the CLI:

    config system interface

    edit wifi

    set mode dhcp

    config wifi-networks

    edit 0

    set wifi-ssid our_wifi

    set wifi-security wpa-personal

    set wifi-passphrase "justforus"

    end

    end

     

    The WiFi interface client_wifi receives an IP address using DHCP.

  4. Configure a WiFi to port1 policy.
    You can use either CLI or GUI to do this. The important settings are:
  5. Incoming Interface (srcintf)

    wifi

    Source Address (srcaddr)

    all

    Outgoing Interface (dstintf)

    port1

    Destination Address (dstaddr)

    all

    Schedule

    always

    Service

    ALL

    Action

    ACCEPT

    Enable NAT

    Selected

Controlled AP selection support in FortiWiFi client mode

Use the following CLI commands to provide a more controlled AP selection method (supported in FortiWiFi client mode).

Syntax

config system interface

edit {name}

set wifi-ap-band {any | 5g-preferred | 5g-only}

next

end