Configuring a FortiWiFi unit as a wireless client

To set up the FortiWiFi unit as a wireless client, you must use the CLI. Before you do this, make sure to remove any AP WiFi configurations such as SSIDs, DHCP servers, and policies.

To configure wireless client mode

1. Change the wireless mode to client. In the CLI, enter the following commands:

   config system global

   set wireless-mode client

   end

2. Respond “y” when asked if you want to continue. The FortiWiFi unit reboots.
3. Configure the WiFi interface settings.

   For example, to configure the client for WPA-Personal authentication on the our_wifi SSID with passphrase justforus, enter the following in the CLI:

   config system interface

   edit wifi

   set mode dhcp

   config wifi-networks

   edit 0

   set wifi-ssid our_wifi

   set wifi-security wpa-personal

   set wifi-passphrase "justforus"

   end

   end

   The WiFi interface client_wifi receives an IP address using DHCP.
   

4. Configure a WiFi to port1 policy.
   You can use either CLI or GUI to do this. The important settings are:

Incoming Interface (srcintf)	wifi
Source Address (srcaddr)	all
Outgoing Interface (dstintf)	port1
Destination Address (dstaddr)	all
Schedule	always
Service	ALL
Action	ACCEPT
Enable NAT	Selected

Controlled AP selection support in FortiWiFi client mode

Use the following CLI commands to provide a more controlled AP selection method (supported in FortiWiFi client mode).

Syntax

config system interface

edit {name}

set wifi-ap-band {any | 5g-preferred | 5g-only}

next

end