Enable WiFi configuration on FortiExtender (Managed)

Starting from its 7.4.4 release, FortiExtender (Managed) supports WiFi configurations on certain FortiExtender (Managed) hardware models. This feature applies to FortiExtender (Managed) devices that support WiFi configuration and are used as FortiGate LAN extension.

To enable WiFi configuration:

1. Configure a WiFi virtual Access Point (VAP):

   config extension-controller extender-vap
       edit "local-vap-1"
           set type local-vap
           set ssid "local-vap1"
           set max-clients 100
           set broadcast-ssid enable
           set security OPEN
           set ip-address 192.168.7.7 255.255.255.0
           set start-ip 192.168.7.100
           set end-ip 192.168.7.200
       next
       edit "local-vap-2"
           set type local-vap
           set ssid "local-vap2"
           set max-clients 0
           set broadcast-ssid enable
           set security WPA2-Personal
           set passphrase xxxxx
           set ip-address 192.168.8.9 255.255.255.0
           set start-ip 192.168.8.100
           set end-ip 192.168.8.200
           set allowaccess http https ping
       next
       edit "lanext-vap1"
           set type lan-ext-vap
           set ssid "lan-ext-ssid"
           set max-clients 0
           set broadcast-ssid enable
           set security WPA2-Personal
           set passphrase xxxxx
           set allowaccess ping telnet http https ssh snmp
       next
   end
   

2. In the extender-profile for lan-extension mode, configure WiFi settings:

   config wifi
       set country US
       config radio-1
           set mode AP
           set band 2.4GHz
           set status enable
           set operating-standard auto
           set guard-interval auto
           set channel CH1 CH6 CH10
           set bandwidth auto
           set power-level 100
           set beacon-interval 100
           set 80211d enable
           set max-clients 0
           set extension-channel auto
           set bss-color-mode auto
           set bss-color 0
           set lan-ext-vap "lanext-vap1"
           set local-vaps "local-vap1"
       end
       config radio-2
           set mode AP
           set band 5GHz
           set status enable
           set operating-standard auto
           set guard-interval auto
           set channel CH36 CH149
           set bandwidth auto
           set power-level 100
           set beacon-interval 100
           set 80211d enable
           set max-clients 0
           set extension-channel auto
           set bss-color-mode auto
           set bss-color 0
           set lan-ext-vap "lanext-vap1"
           set local-vaps "local-vap1" "local-vap2"
       end
   end
   

3. Authorize the FortiExtender on the FortiGate. After LAN-Extension is created on the FortiGate, the WiFi configuration profile will be synced to the FortiExtender, and the device is ready for WiFi networking.