Skip to main content
AryB
New Member
January 1, 2019
Solved

Guest Wi-Fi Access with forti AP

  • January 1, 2019
  • 2 replies
  • 7917 views

Hello Everybody,

As a total Newbie, I need some help. I'm the network administrator of a little association. We have an Active directory.  There is wi-fi access to our network (and through it to the internet) for some workers. For that we use 3 Forti AP 221C.

Of course I have access to their admin page through a web browser and also to lots of setting through forticloud.

 

I would like to set up a Guest WiFi access that only give access to the internet (not to shared folder on our LAN for example).

 

Is it possible ? May I add something else on my network (hardware / software) to do this ? I found this : https://cookbook.fortinet.com/guest-wifi-accounts-60/ but don't know where can I find all this.

 

Thanks a lot ! Have a Happy New Year !

Best answer by Toshi_Esumi

A problem with FC controlled regular FAP is there is no control for Guest WiFi subnet to reach internal network after leaving the FAP. If FortiGate is the controller you can set up a tunnel mode then let the FGT control those accesses. I don't think those FAPs have even access-list capability. You need to control it by a router or a FW the FAP is directly connected to.

2 replies

Toshi_Esumi
SuperUser
SuperUser
January 2, 2019

A problem with FC controlled regular FAP is there is no control for Guest WiFi subnet to reach internal network after leaving the FAP. If FortiGate is the controller you can set up a tunnel mode then let the FGT control those accesses. I don't think those FAPs have even access-list capability. You need to control it by a router or a FW the FAP is directly connected to.

AryB
AryBAuthor
New Member
January 6, 2019

OK, I see, thanks a lot !

Philgre
New Member
January 10, 2019

Yes it's possible. you have to create a guest SSID. Gives access only to the internet.

AryB
AryBAuthor
New Member
January 13, 2019

Great, but the question is HOW ??