How to add WiFi interface to SD-WAN zone

hi,

wifi ssid's cannot be added as SDWAN members, https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/942095/sd-wan-members-and-zones#:~:text=physical%20ports%2C%20VLAN%20interfaces%2C%20LAGs%2C%20IPsec%20tunnels%2C%20GRE%20tunnels%2C%20IPIP%20tunnels%2C%20and%20FortiExtender%20interfaces 

You can’t add a WiFi SSID directly to an SD-WAN zone — only routed interfaces can be SD-WAN members.
Your SSID (wqtn.30.wifi) sits inside the software switch, so SD-WAN never sees it as a WAN interface.

To fix it, you must break the SSID out of the switch and turn it into a standalone L3 interface:

1. Delete the SSID from the software switch (wqt.root).

2. Create a VLAN or physical L3 interface for the SSID:

   • config wireless-controller vap → assign VLAN X

   • config system interface → create VLAN X, give it an IP, and set its role = WAN

3. Assign the interface to the appropriate zone / sdwan-member:

   • config system sdwan → config members → add interface = <vlan-interface>

4. Add SD-WAN rules / services as usual.

Key point: SD-WAN cannot operate across a software switch because switching = Layer 2. SD-WAN requires a routed L3 interface. Once you give the SSID its own L3 interface, SD-WAN policies will apply correctly.