Skip to main content
jamie-duong
jamie-duong
New Member
December 5, 2023
Question

EasyMesh AP devices can't mesh if connect directly to LAN port of Fortigate 92D

  • December 5, 2023
  • 2 replies
  • 3650 views

Hello everyone!

I looking for help for a case,

I have Fortigate 92D and interfaces created successfully and it also be router, firewall andDHCP server.

I have some  ZTE Wifi AP devices support for EasyMesh.

I have an issue with that APs when connect them to same interface in Fortigate that mesh function via wired cable will not works, but if I put a Switch between Fortigate and APs  everything work fine.

 

EasyMesh not work: Internet ----> Fortigate 92D ----[LAN cable]---> APs

EasyMesh work:       Internet ----> Fortigate 92D ----[LAN cable]---> Switch ----[LAN cable]---> APs

 

Fortigate 92D is great device for Home because it has a lot of LAN ports so put a Switch to help APs functioning is not a good setup.

 

Thank you!

2 replies

AEK
SuperUser
AEK
SuperUser
December 6, 2023

Hello Jamie

  • What do you mean exactly by not working? Do you lean the interface LED unlit, or no ping, or AP off, ...?
  • Is the AP PoE? Is the switch PoE?
AEK
    jamie-duong
    jamie-duongAuthor
    New Member
    December 7, 2023

    Hi AEK,

    There AP are not PoE and switch is L2 and not PoE.

    In roaming mode. 1 AP will be setup as controller and it connected Lan-Lan with Fortigate 92D.

    other AP will be setup as agent and it connected Wan-LAN with Fortigate 92D.

    In controller I setup everything ex: SSIDs, password, radio (5G, 2,4G),... If everything fine, all agent will get that config automatically and LED indicate as blue, if not found any controller the LED will be red.

    In my case of EasyMesh not work all AP agent LED are red and I cannot use wifi from AP agents.

    If I push add switch as case EasyMesh works all agent LED are blue and I can use internet and wifi normally.

    P/S: I tried to add some setup in fortigate related to broadcast but no luck.

     

    Hope above explant help you clear understand my issue.

     

    Jamie

    AEK
    SuperUser
    AEK
    SuperUser
    December 7, 2023

    Hi Jamie

    In case the agent APs connect to master AP via wired connection and using broadcast for discovery, then you may try to configure the related FortiGate interfaces as hardware switch (or software switch). Hope this helps.

    AEK
    AntonyChen
    AntonyChen
    Explorer II
    January 21, 2025

    omg, today i met the same problem

    my fortigate LAN interface is configured as hardware switch, and ZTE mesh wifi cannot discover each other if they are connect directly to fortigate LAN ports, the bold line is custom configuration, but this does not help. I dont know which traffic that fortigate blocked and did not allow wifi mesh device to work . If they connect using another switch connected to fortigate then all working fine.

    So worry.

    config system interface
    edit "LAN"
    set vdom "root"
    set ip 192.168.1.1 255.255.255.0
    set allowaccess ping https ssh snmp fgfm fabric ftm speed-test
    set broadcast-forward enable
    set l2forward enable
    set netbios-forward enable
    set type hard-switch
    set explicit-web-proxy enable
    set stp enable
    set device-identification enable
    set lldp-transmission enable
    set role lan
    set snmp-index 15
    set auto-auth-extension-device enable


    Terms & ConditionsAccessibility statement