Creating WiFi SSID on FortiGate

In order for the WiFi client to connect using its certificate a SSID has to be configured on the FortiGate to accept this type of authentication.

1. Go to WiFi & Switch Controller > SSID and create an SSID with DHCP for clients.



2. Set the following WiFi Settings, assigning the RADIUS Server configured earlier.



3. Then go to WiFi & Switch Controller > FortiAP Profiles and edit your FortiAP default profile.

Select the new SSID for both Radio 1 and Radio 2.



4. Then go to Policy & Objects > IPv4 Policy and create a policy that allows outbound traffic from the EAP-TLS wireless interface to the Internet.