Required. Enter a name for the SSID interface.

Enter an alternate interface name to remind you what this interface is being used for.

Select one of the following:

Tunnel—Data for WLAN passes through WiFi Controller. This is the default.

Bridge—FortiAP unit Ethernet and WiFi interfaces are bridged.

Mesh—Radio receives data for WLAN from mesh backhaul SSID.

If you selected the Tunnel traffic mode, this field is required. Enter the IP address and netmask for the SSID.

If you selected the Tunnel traffic mode, you can select DHCP Server to assign IP addresses to clients. If you select DHCP Server, right-click in the Addrss Range table and select Create New to define the IP address range for a DHCP server on the FortiPortal unit. You also need to enter the netmask if you select DHCP Server.

Enter the SSID. By default, this field contains fortinet.

Select the security mode for the wireless interface. Wireless users must use the same security mode to be able to connect to this wireless interface.

Captive Portal—authenticates users through a customizable web page.

WPA2 Only Personal—WPA2 is WiFi Protected Access version 2. There is one pre-shared key (password) that all users use.

WPA2 Only Enterprise—similar to WPA2 Only Personal but is best used for enterprise networks. Each user is separately authenticated by user name and password.

Required. Enter the encryption key that the clients must use.

Optionally, disable broadcast of SSID. By default, the SSID is broadcast.

Select when the SSID is enabled. You can select always or none.

Select to enable the unit to block intra-SSID traffic.

Select to use a RADIUS server. If you select this option, select the server name from the drop-down list.

In an SSID, you can define a VLAN pool. As clients associate to an AP, they are assigned to a VLAN.

If you selected the Tunnel or Bridge traffic mode, select one of the following options:

Disable—This option is selected by default and no VLAN pools are used.

Managed AP Group—A VLAN pool can assign one of several available VLANs for network load balancing purposes. If you select Managed AP Group, select VLANs from the Available list and then select > or >> to move them to the Selected list.

Round Robin—The VLAN pool chooses the VLAN with the smallest number of clients. If the VLAN pool contains no valid VLAN ID, the SSIDʼs static VLAN ID setting is used.

Hash—The VLAN pool chooses a VLAN based on a hash of the current number of SSID clients and the number of entries in the VLAN pool. If the VLAN pool contains no valid VLAN ID, the SSIDʼs static VLAN ID setting is used.