Skip to main content
bascheew
Visitor III
October 10, 2019
Question

VDOMs and Wireless - can someone point me to the documentation?

  • October 10, 2019
  • 8 replies
  • 10228 views

I can't find clear answers in the documentation regarding VDOMs and Wifi.  When running VDOMs, do registered FortiAPs also have the same VDOMs?  Is it possible to register FortiAPs to a VDOM, yet turn up SSIDs for different VDOMs on the same AP?  Or does both the control and dataplane of the AP stay only the VDOM where it's registered?

 

Ideally we can install a single group of APs and use them for all VDOMs!

 

Thanks,

Brian

    8 replies

    Toshi_Esumi
    SuperUser
    SuperUser
    October 10, 2019

    Each vdom should have own wireless-controller config because they're basically separate routers/FWs. So you need to control each FortiAP from one of vdoms, and can't belong to multiple vdoms at the same time. To make your idea sharing a cluster of FAPs at one vdom (like root) and share them with different vdoms, you just need to route those SSID networks (WLANs) through vdom-links to connect them to each vdom separately.

    emnoc
    New Member
    October 10, 2019

     

    and can't belong to multiple vdoms at the same time. To make your idea sharing a cluster of FAPs at one vdom (like root) and share them with different vdoms, you just need to route those SSID networks (WLANs) through vdom-links to connect them to each vdom separately.

     

    Not sure about that. I'm sure you can set multiple WLANs for an array of APs and associate these in various vdoms.

    also take heed of ;

     

    "

    Sharing Tunnel SSIDs within a single managed AP between VDOMs as a Virtual AP for multi-tenancy (439751) Support has been added for the ability to move a tunnel mode VAP into a VDOM, similar to an interface/VLAN in VDOMs. FortiAP is registered into the root VDOM. Within a customer VDOM, customer VAPs can be created/added. In the root VDOM, the customer VAP can be added to the registered FortiAP. Any necessary firewall rules and interfaces can be configured between the two VDOMs. Syntax config wireless-controller global set wtp-share {enable | disable} end

    "

     

    So for the OP, your answer is yes. A single array and share between 2 or more vdom is good. Control/Management plane of the AP is still within management but SSID and VAP can be delivered in a multi-tenant.  I do that today in my home with a WLAN in 2x vdoms and that's in a sml SOHO FGT.

     

    Ken Felix

     

     

    Toshi_Esumi
    SuperUser
    SuperUser
    October 10, 2019

    Thank you for the correction, Ken. I'll test it out myself.

     

    Toshi

    WiFiGuY
    Visitor III
    February 24, 2022

    delete me

    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!