Fortinet Document Library

Version:

Version:


Table of Contents

FortiWiFi and FortiAP Configuration Guide

Download PDF
Copy Link

Configuring a point-to-point bridge

To connect two wired network segments using a WiFi link, you can create a point-to-point bridge. The effect is the same as connecting the two network segments to the same wired switch.

You need to:

  • Configure a mesh-backhaul SSID and a mesh root AP as described in Configuring the mesh root AP.

    Note: The mesh root AP for a point-to-point bridge must be a FortiAP unit, not the internal AP of a FortiWiFi unit.

  • Configure a mesh leaf FortiAP as described in Configuring the mesh leaf FortiAPs and add these steps to configure the Ethernet bridge:
    • If you are using the FortiAP GUI, select Ethernet Bridge.
    • If you are using the FortiAP CLI, insert the following command before the line reading cfg -c:

      cfg -a MESH_ETH_BRIDGE=1

  • Connect the local wired network to the Ethernet port on the mesh leaf FortiAP unit. Users are assigned IP addresses from the DHCP server on the wired network connected to the mesh root FortiAP unit.

note icon

In general, the mesh-Ethernet bridge automatically detects VLAN ID tags in data packets and allows them to pass. When necessary, you can configure VLAN IDs for permanent support in a mesh-Ethernet bridge. To do this, enter the following commands in the mesh leaf FortiAP CLI:

cfg -a MESH_ETH_BRIDGE_VLANS=100,200,300

cfg -c

Configuring a point-to-point bridge

To connect two wired network segments using a WiFi link, you can create a point-to-point bridge. The effect is the same as connecting the two network segments to the same wired switch.

You need to:

  • Configure a mesh-backhaul SSID and a mesh root AP as described in Configuring the mesh root AP.

    Note: The mesh root AP for a point-to-point bridge must be a FortiAP unit, not the internal AP of a FortiWiFi unit.

  • Configure a mesh leaf FortiAP as described in Configuring the mesh leaf FortiAPs and add these steps to configure the Ethernet bridge:
    • If you are using the FortiAP GUI, select Ethernet Bridge.
    • If you are using the FortiAP CLI, insert the following command before the line reading cfg -c:

      cfg -a MESH_ETH_BRIDGE=1

  • Connect the local wired network to the Ethernet port on the mesh leaf FortiAP unit. Users are assigned IP addresses from the DHCP server on the wired network connected to the mesh root FortiAP unit.

note icon

In general, the mesh-Ethernet bridge automatically detects VLAN ID tags in data packets and allows them to pass. When necessary, you can configure VLAN IDs for permanent support in a mesh-Ethernet bridge. To do this, enter the following commands in the mesh leaf FortiAP CLI:

cfg -a MESH_ETH_BRIDGE_VLANS=100,200,300

cfg -c