Skip to main content
Luis123
Luis123
New Member
October 2, 2015
Solved

Configure by CLI, wi-fi in fortiwifi 60D

  • October 2, 2015
  • 1 reply
  • 18444 views

Hello

 

Please, can you give me an example about the configuration of Wi-fi by CLI in Fortiwifi 60D with wpa2?

 

Thanks in advance

 

Regards!

    Best answer by ShrewLWD

    Hi Luis,

    What firmware version are you running?  In 5.2.x, wpa2 (AES) is the default, so you really only need to add the name of the wireless interface, your SSID, and your password.

     

    (this is the default code for an out-of-the-box 5.2.x, with the SSID line changed).

     

    config wireless-controller vap

        edit "wifi"

            set vdom "root"

            set ssid "SSIDNameHere"

            set passphrase ENC mxdSX1C9IVVKmGMBqV+k3C5cQXT6Bzfh+NtWP6pBG6zwEQOnSoangyqfSJdBKVqK9apt9ymAObv3Uy1TuRa0JkuXCBI2bULyDXVdCjVMwuuiXWky8XXCq5OrM7UBR1lh/iKb3zUhFYEibZis2m0ZsjN/Y+fD7gssQo0XbQMJtkAjzC9BMVKXP+xgyl597ZQwRe9cdg==

        next

    end

     

    In earlier versions you would need to set additional lines such as;

         set security wpa2-only-personal

         set encrypt AES

     

    You can type your passphrase in the CLi in plaintext, omitting the ENC, and it will encrypt it for you afterwards

    e.g. set passphrase ThisIsMyUnsecureWirelessPassphrase

     

    it will save that line as

    set passphrase ENC mxdSX1bnrUCoHgRPexacifVpWDwrYqmCcPj+B69rYJuCwvgsG6dMAzRI+YEeh6sgzIGoLIKAkjYdgTerW8Q7yaehQc0/PUehFMKrB4pXSQubvv49Q+IWZiYqNmLvrjGchxeKSB1yty6/MnqVnprjfaQ1FCAxzzqf6h+1l16VsfiSJxf1xh4k0CeuhuwZgbp/gviqRQ==

    1 reply

    ShrewLWD
    ShrewLWDAnswer
    New Member
    October 2, 2015

    Hi Luis,

    What firmware version are you running?  In 5.2.x, wpa2 (AES) is the default, so you really only need to add the name of the wireless interface, your SSID, and your password.

     

    (this is the default code for an out-of-the-box 5.2.x, with the SSID line changed).

     

    config wireless-controller vap

        edit "wifi"

            set vdom "root"

            set ssid "SSIDNameHere"

            set passphrase ENC mxdSX1C9IVVKmGMBqV+k3C5cQXT6Bzfh+NtWP6pBG6zwEQOnSoangyqfSJdBKVqK9apt9ymAObv3Uy1TuRa0JkuXCBI2bULyDXVdCjVMwuuiXWky8XXCq5OrM7UBR1lh/iKb3zUhFYEibZis2m0ZsjN/Y+fD7gssQo0XbQMJtkAjzC9BMVKXP+xgyl597ZQwRe9cdg==

        next

    end

     

    In earlier versions you would need to set additional lines such as;

         set security wpa2-only-personal

         set encrypt AES

     

    You can type your passphrase in the CLi in plaintext, omitting the ENC, and it will encrypt it for you afterwards

    e.g. set passphrase ThisIsMyUnsecureWirelessPassphrase

     

    it will save that line as

    set passphrase ENC mxdSX1bnrUCoHgRPexacifVpWDwrYqmCcPj+B69rYJuCwvgsG6dMAzRI+YEeh6sgzIGoLIKAkjYdgTerW8Q7yaehQc0/PUehFMKrB4pXSQubvv49Q+IWZiYqNmLvrjGchxeKSB1yty6/MnqVnprjfaQ1FCAxzzqf6h+1l16VsfiSJxf1xh4k0CeuhuwZgbp/gviqRQ==
    Luis123
    Luis123Author
    New Member
    October 2, 2015

    Hi  ShrewLWD

     

    It is a FortiGate 5.2.2,build0642 (GA)

     

    Can be this an example?:

     

    config wireless-controller vap    edit "wifi"        set vdom "root-0"        set ssid "SSID-examp"        set passphrase example1    nextend

     

    Acoording your explanation, it is wpa2, right?

     

    Regards!

    ShrewLWD Gold Member  Total Posts : 136Scores: 2Reward points: 0Joined: 4/23/2009Status: offline[/ul] Re: Configure by CLI, wi-fi in fortiwifi 60D 2 hours ago (permalink)☄ Helpful     0 Hi Luis, What firmware version are you running?  In 5.2.x, wpa2 (AES) is the default, so you really only need to add the name of the wireless interface, your SSID, and your password.   (this is the default code for an out-of-the-box 5.2.x, with the SSID line changed).   config wireless-controller vap     edit "wifi"         set vdom "root"         set ssid "SSIDNameHere"         set passphrase ENC mxdSX1C9IVVKmGMBqV+k3C5cQXT6Bzfh+NtWP6pBG6zwEQOnSoangyqfSJdBKVqK9apt9ymAObv3Uy1TuRa0JkuXCBI2bULyDXVdCjVMwuuiXWky8XXCq5OrM7UBR1lh/iKb3zUhFYEibZis2m0ZsjN/Y+fD7gssQo0XbQMJtkAjzC9BMVKXP+xgyl597ZQwRe9cdg==     next end   In earlier versions you would need to set additional lines such as;      set security wpa2-only-personal      set encrypt AES   You can type your passphrase in the CLi in plaintext, omitting the ENC, and it will encrypt it for you afterwards e.g. set passphrase ThisIsMyUnsecureWirelessPassphrase   it will save that line as 
    set passphrase ENC mxdSX1bnrUCoHgRPexacifVpWDwrYqmCcPj+B69rYJuCwvgsG6dMAzRI+YEeh6sgzIGoLIKAkjYdgTerW8Q7yaehQc0/PUehFMKrB4pXSQubvv49Q+IWZiYqNmLvrjGchxeKSB1yty6/MnqVnprjfaQ1FCAxzzqf6h+1l16VsfiSJxf1xh4k0CeuhuwZgbp/gviqRQ==
      Answer Unhelpful Report AbuseForward  Quote   #1   Luis123 Quick Reply: (Open Full Version)        Paragraph Font Family Font Size                  Path: p   Preview    Submit Post     Home » All Forums » [link=https://forum.fortinet.com/tt.aspx?forumid=119][Other FortiGate and FortiOS Topics][/link] » System settings » Configure by CLI, wi-fi in fortiwifi 60D Jump to:  Jump to - - - - - - - - - -  [FortiGate / FortiOS UTM features] - - - - AntiVirus - - - - Application Control - - - - Data Leak Prevention (DLP) - - - - Email filtering (AntiSPAM) - - - - Former Content Management Forum - - - - Intrusion Detection & Prevention - - - - Web Filtering [Fortinet Beta Programs] - - - - Beta Message Board [Fortinet Services] - - - - FortiCloud Threat Detection Service [Other FortiGate and FortiOS Topics] - - - - Firewall  - - - - Log & Report - - - - Miscellaneous -- FortiOS and FortiGate - - - - New Features -- FortiOS - - - - Routing and Transparent Mode - - - - System settings - - - - User and Authentication - - - - VPN [Other Fortinet Products] - - - - AscenLink - - - - Coyote Point - - - - FortiAnalyzer - - - - FortiAP - - - - FortiAuthenticator - - - - FortiBalancer - - - - FortiBridge - - - - FortiCache - - - - FortiCamera & FortiRecorder - - - - FortiCarrier  - - - - FortiClient - - - - FortiConverter - - - - FortiDB - - - - FortiDDOS - - - - FortiDirector - - - - FortiDNS - - - - FortiExplorer - - - - FortiGuard - - - - FortiMail - - - - FortiManager - - - - FortiPlanner - - - - FortiSandbox - - - - FortiScan - - - - FortiSwitch - - - - FortiToken - - - - FortiVoice - - - - FortiWeb - - - - FortiWiFi [Forum Information & Miscellaneous Topics] - - - - Forum News - - - - Ideas for Forum Site - - - - Fortinet Cookbook - - - - Knowledge Base - - - - Technical -- non-FortiOS - - - - Miscellaneous -- non-technical      © 2015 APG vNext Commercial Version 5.5   Latest Posts    What exactly does this mean? Re: FortiClient VPN Problems With OSX 10.11 El Capitan Re: Configure by CLI, wi-fi in fortiwifi 60D FortiClient SSO Mobility Agent Re: Report for Specific User and Destination IP Range Re: Report for Specific User and Destination IP Range Configure by CLI, wi-fi in fortiwifi 60D Re: NAT Internal Traffic Re: Report for Specific User and Destination IP Range Re: HA across comcast switched fiber network [/ul] Active Posts    FortiClient VPN Problems With OSX 10.11 El Capitan NAT Internal Traffic Mixed up Timestamps in Netflow Captive Portal & OpenLDAP Limited CLI commands available SSLVPN stops at 10% Country code on FortiAP-11C not changing FAC and FSSO TLS v1.2 not provided in FGT 5.0? Receiving Attachment Size [/ul] All FAQs    New features : Changing your email, screen name & username New features: Private Messaging New features: Marking posts as 'Answer' or 'Helpful'. Using 'Report Abuse' and Ticket List [/ul] ShrewLWD
    ShrewLWD
    ShrewLWD
    New Member
    October 5, 2015

    Yes, that is correct.  You can always double check yourself by doing;

    config wireless-controller vap   

    edit "wifi"

    show full

     

    It will then show you all the possible settings options, and their defaults.

     

    Those two lines should read;

         set security wpa2-only-personal      set encrypt AES

    Terms & ConditionsAccessibility statement