Fortinet black logo

Handbook

Configuring a FortiAP unit as a WiFi Client in client mode

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:404373
Download PDF

Configuring a FortiAP unit as a WiFi Client in client mode

To set up the FortiAP unit as a WiFi client, you must use the CLI. Before you do this, be sure to remove any AP WiFi configurations such as SSIDs, DHCP servers, policies, and so on.

To configure wireless client mode
  1. Change the WiFi mode to client. In the CLI, enter the following commands:

    config system global

    set wireless-mode client

    end

  2. Respond “y” when asked if you want to continue. The FortiWiFi unit will reboot.
  3. Configure the WiFi interface settings.

    For example, to configure the client for WPA-Personal authentication on the our_wifi SSID with passphrase justforus, enter the following in the CLI:

    config system interface

    edit wifi

    set mode dhcp

    config wifi-networks

    edit 0

    set wifi-ssid our_wifi

    set wifi-security wpa-personal

    set wifi-passphrase "justforus"

    end

    end

    The WiFi interface client_wifi receives an IP address using DHCP

  4. Configure a WiFi to port1 policy.
    You can use either CLI or GUI to do this. The important settings are:
  5. Incoming Interface (srcintf)

    wifi

    Source Address (srcaddr)

    all

    Outgoing Interface (dstintf)

    port1

    Destination Address (dstaddr)

    all

    Schedule

    always

    Service

    ALL

    Action

    ACCEPT

    Enable NAT

    Selected

Controlled AP selection support in FWF client mode

Use the following CLI commands to provide a more controlled AP selection method (supported in FortiWiFi client mode).

Syntax

config system interface

edit {name}

set wifi-ap-band {any | 5g-preferred | 5g-only}

next

end

Configuring a FortiAP unit as a WiFi Client in client mode

To set up the FortiAP unit as a WiFi client, you must use the CLI. Before you do this, be sure to remove any AP WiFi configurations such as SSIDs, DHCP servers, policies, and so on.

To configure wireless client mode
  1. Change the WiFi mode to client. In the CLI, enter the following commands:

    config system global

    set wireless-mode client

    end

  2. Respond “y” when asked if you want to continue. The FortiWiFi unit will reboot.
  3. Configure the WiFi interface settings.

    For example, to configure the client for WPA-Personal authentication on the our_wifi SSID with passphrase justforus, enter the following in the CLI:

    config system interface

    edit wifi

    set mode dhcp

    config wifi-networks

    edit 0

    set wifi-ssid our_wifi

    set wifi-security wpa-personal

    set wifi-passphrase "justforus"

    end

    end

    The WiFi interface client_wifi receives an IP address using DHCP

  4. Configure a WiFi to port1 policy.
    You can use either CLI or GUI to do this. The important settings are:
  5. Incoming Interface (srcintf)

    wifi

    Source Address (srcaddr)

    all

    Outgoing Interface (dstintf)

    port1

    Destination Address (dstaddr)

    all

    Schedule

    always

    Service

    ALL

    Action

    ACCEPT

    Enable NAT

    Selected

Controlled AP selection support in FWF client mode

Use the following CLI commands to provide a more controlled AP selection method (supported in FortiWiFi client mode).

Syntax

config system interface

edit {name}

set wifi-ap-band {any | 5g-preferred | 5g-only}

next

end