Configure WiFi VAPs as members of switch interface

Starting from its 7.4.4 release, FortiExtender has enhanced the configuration schema for the system switch-interface to support WiFi Virtual Access Points (VAPs) as members of a switch-interface. A VAP can now be added as members of a switch-interface as long as it is not specified as a WLAN bridge. In so doing, the VAP shares DHCP servers and firewall policies with the switch-interface.

This feature allows for greater flexibility in configuring switch-interfaces and VAPs, enabling you to manage your network resources and configurations more efficiently.

To add a WiFi VAP as member of a switch interface:

1. Create a virtual access point (VAP), with wlan-bridge set to no.

   FXW30FTF23000020 # config wifi vap 
   FXW30FTF23000020 (vap) # show
   config wifi vap
       edit vap1
           set ssid FXW30F-WiFi
           set broadcast-ssid enable
           set dtim 1
           set rts-threshold 2347
           set max-clients 0
           set target-wake-time enable
           set bss-color-partial enable
           set mu-mimo enable
           set wlan-bridge no
           config ap-security
               set security-mode WPA2-Personal
               set pmf 
               set passphrase ******
           end
       next
   end
   

2. Add the VAP to the radio profile.

   FXW30FTF23000020 # config wifi radio-profile 
   FXW30FTF23000020 (radio-profile) # show
   config wifi radio-profile
       edit r2
           set band 5GHz
           set status enable
           set role lan
           set operating-standards auto
           set beacon-interval 100
           set 80211d enable
           set max-clients 0
           set power-mode auto
           set channel
           set bandwidth auto
           set extension-channel auto
           set guard-interval auto
           set bss-color-mode auto
           set vap vap1
       next
   end

3. Add the VAP as a member of a switch interface.

   FXW30FTF23000020 (switch-interface) # show
   config system switch-interface
       edit lan
           set vlan-support disable
           config member
               edit m1
                   set type vap
                   set vap vap1
                   set pvid 0
               next
           end
           set stp disable
       next
   end 

4. Verify the current VAP and bridge interface maps.

   FXW30FTF23000020 # get wifi vap-maps all
   vap id             bridg name         ap interface   
   vap1               lan                aap0  
   vap2               vap2               
   vap3               vap3               aap1  
   
   FXW30FTF23000020 #