FortiGate Configurations
Use the FortiGate command line interface for related MPSK configurations to use with FortiGuest. For more information see FortiGate CLI Reference.
Configuring an MPSK profile
Run the following commands to enable an MPSK Profile on an external server.
config wireless-controller mpsk-profile
edit "<MPSK Profile Name>"
set mpsk-external-server-auth enable
set mpsk-external-server <server-1>
Note: The shared secret must be the same as the secret in the RADIUS Client configured in FortiGuest.
You can configure FortiGuest as the external server in the FortiGate GUI. Navigate to WiFi & Switch Controller > Connectivity Profiles. Enable MPSK external server authentication and select FortiGuest as the MPSK external server.
Configuring Virtual Access Point (VAP)
Run the following command to configure a VAP. Ensure that an SSID used here is configured with the security mode WPA2 Personal.
config wireless-controller vap
edit "SSID Name"
set ssid "SSID Name"
set security wpa2-only-personal
set mpsk-profile "MPSK Profile Name"
next