Fortinet black logo

FortiWiFi and FortiAP Configuration Guide

Configuring a FortiWiFi unit as a wireless client

Copy Link
Copy Doc ID 8391206d-966e-11eb-b70b-00505692583a:404373
Download PDF

Configuring a FortiWiFi unit as a wireless client

Tooltip

Wireless client configuration is only available on select FortiWiFi models. See FortiWiFi unit as a wireless client for the list of supported models.

Caution

Before setting up the FortiWiFi unit as a wireless client using the steps described below, make sure to remove any AP WiFi configurations such as SSIDs, DHCP servers, policies, and software switch members using the CLI or GUI.

To configure wireless client mode - GUI
  1. Go to WiFi and Switch Controller > Local WiFi Radio and change the Mode to Wireless Client.

    Note: You must remove any AP WiFi configurations such as SSIDs, DHCP servers, policies, and software switch members before you can change the mode to Wireless Client. Once you select Wireless Client, the FortiWiFi unit will reboot.

  2. Click Add Network and select an SSID to set up the WiFi connection.

  3. Click OK to save the WiFi Network Connection Setting.
  4. From the Local WiFi Radio page, verify that the WiFi network is connected.

  5. Go to Policy & Object > Firewall Policy and click Create New to create a firewall policy.

  6. Enter the following policy information:

    Incoming Interface (srcintf)

    wifi

    Source Address (srcaddr)

    all

  7. Configure remaining fields as needed, when you are finished, click OK.

To configure wireless client mode - CLI
  1. Change the wireless mode to client.

    config system global
      set wireless-mode client
    end

    Note: You must remove any AP WiFi configurations such as SSIDs, DHCP servers, policies, and software switch members before you can change the mode to Wireless Client. Once you select Wireless Client, the FortiWiFi unit will reboot.

  2. 2. Set up a wifi-network entry under interface "wifi".

    config system interface
      edit "wifi"
        config wifi-networks
          edit 1
            set wifi-ssid "FOS_61F_psk"
            set wifi-passphrase *
          next
        end
      next
    end
  3. Create a firewall policy from "internal" to "wifi".

    config firewall policy
      edit 1
        set name "lan"
        set srcintf "internal"
        set dstintf "wifi"
        set action accept
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set nat enable
      next
    end
  4. Connect a wired station to the internal ports of the FortiWiFi to verify that it can pass traffic to the Internet.

Controlled AP selection support in FortiWiFi client mode

Use the following CLI commands to provide a more controlled AP selection method (supported in FortiWiFi client mode).

Syntax

config system interface

edit {name}

set wifi-ap-band {any | 5g-preferred | 5g-only}

next

end

Configuring a FortiWiFi unit as a wireless client

Tooltip

Wireless client configuration is only available on select FortiWiFi models. See FortiWiFi unit as a wireless client for the list of supported models.

Caution

Before setting up the FortiWiFi unit as a wireless client using the steps described below, make sure to remove any AP WiFi configurations such as SSIDs, DHCP servers, policies, and software switch members using the CLI or GUI.

To configure wireless client mode - GUI
  1. Go to WiFi and Switch Controller > Local WiFi Radio and change the Mode to Wireless Client.

    Note: You must remove any AP WiFi configurations such as SSIDs, DHCP servers, policies, and software switch members before you can change the mode to Wireless Client. Once you select Wireless Client, the FortiWiFi unit will reboot.

  2. Click Add Network and select an SSID to set up the WiFi connection.

  3. Click OK to save the WiFi Network Connection Setting.
  4. From the Local WiFi Radio page, verify that the WiFi network is connected.

  5. Go to Policy & Object > Firewall Policy and click Create New to create a firewall policy.

  6. Enter the following policy information:

    Incoming Interface (srcintf)

    wifi

    Source Address (srcaddr)

    all

  7. Configure remaining fields as needed, when you are finished, click OK.

To configure wireless client mode - CLI
  1. Change the wireless mode to client.

    config system global
      set wireless-mode client
    end

    Note: You must remove any AP WiFi configurations such as SSIDs, DHCP servers, policies, and software switch members before you can change the mode to Wireless Client. Once you select Wireless Client, the FortiWiFi unit will reboot.

  2. 2. Set up a wifi-network entry under interface "wifi".

    config system interface
      edit "wifi"
        config wifi-networks
          edit 1
            set wifi-ssid "FOS_61F_psk"
            set wifi-passphrase *
          next
        end
      next
    end
  3. Create a firewall policy from "internal" to "wifi".

    config firewall policy
      edit 1
        set name "lan"
        set srcintf "internal"
        set dstintf "wifi"
        set action accept
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set nat enable
      next
    end
  4. Connect a wired station to the internal ports of the FortiWiFi to verify that it can pass traffic to the Internet.

Controlled AP selection support in FortiWiFi client mode

Use the following CLI commands to provide a more controlled AP selection method (supported in FortiWiFi client mode).

Syntax

config system interface

edit {name}

set wifi-ap-band {any | 5g-preferred | 5g-only}

next

end