Skip to main content
Serdark54
Serdark54
New Member
November 11, 2023
Question

FortiAP 421E vlan problem

  • November 11, 2023
  • 3 replies
  • 2094 views

I have successfully completed the VLAN configuration on my FortiGate F100E device with a manageable Netgear switch, and devices connected to the Netgear ports are obtaining IP addresses without any issues. However, I would like to use three out of my six FortiAP devices with VLAN and the other three without VLAN. How can this be achieved?

3 replies

mle2802
Staff
mle2802
Staff
November 11, 2023

Hi @Serdark54,

You can use tunnel mode SSID for without VLAN traffic and bridge mode to tag VLAN. Please refer to this document for more information "https://community.fortinet.com/t5/FortiAP/Technical-Tip-SSID-Local-bridge-vs-Tunnel-mode/ta-p/272838"

Regards,
Minh

Serdark54
Serdark54Author
New Member
November 11, 2023

Hi, link is dont work

ebilcari
Staff
ebilcari
Staff
November 12, 2023

Since you are using a managed switch to connect the APs it's always recommended to use a dedicated VLAN for AP management. It's more secure (management traffic don't mix with user's traffic) and it's easy to troubleshoot in case of problems. For WiFi user's traffic you can than choose to bridge the traffic to the switch port or tunnel it to the WLC/FGT.

Since you have FGT and FAP, using tunnel mode SSIDs is the recommended way since it removes the need of spanning WiFi user's VLANs across the switches and it's easy to configure and troubleshoot.

Emirjon
Serdark54
Serdark54Author
New Member
November 14, 2023

FortiAPs were connected to the vlan structure on the Netgear gs724tpv2 managed switch and the ssids were put in tunnel mode, but they still could not receive IP. Since the company was at work, I reset the switch to factory settings and used it without vlan. I'm thinking of doing this again this weekend. I would appreciate it if you could share the guide as a video.

Terms & ConditionsAccessibility statement