Skip to main content
Forti-Mon
Explorer
September 30, 2024
Solved

Fortigate+Fortiswitch+FortiAP

  • September 30, 2024
  • 2 replies
  • 1769 views

Hi

 

So we had a test AP setup in Fortigate under a physical interface with a guest and a staff WIFI setup - all worked correctly and correct DHCP IP assigned.

 

I have since connected a Fortiswitch, i have created a new VLAN and took the IP address and range from the existing physical guest VLAN and used that on the new fortiswitch VLAN (then changed the address on the physical)

the AP is up + online, I can see both SSID's, but when I attempt to connect to the guest WIFI I get a random IP address on the wrong subnet an the device never connects.....log states 'Wireless station DHCP process failed with no server response' 

 

I have adjusted all policies to allow traffic as far as I can see.

 

Any ideas?

 

Thanks.

 

 

Best answer by ebilcari

In case you are using Bridge SSID (with Optional VLAN ID), remember to allow these end user's VLANs in the switchport where the AP is connected. More information is shown in this article.

2 replies

adambomb1219
SuperUser
SuperUser
September 30, 2024

Sounds like you are using Tunnel Mode SSID vs bridge?  Which do you want?

Forti-Mon
Forti-MonAuthor
Explorer
September 30, 2024

Current setup is bridge

 

 

ebilcari
Staff
ebilcariAnswer
Staff
September 30, 2024

In case you are using Bridge SSID (with Optional VLAN ID), remember to allow these end user's VLANs in the switchport where the AP is connected. More information is shown in this article.

Emirjon
Forti-Mon
Forti-MonAuthor
Explorer
October 1, 2024

Thank you! sorted