FortiAP
FortiAP devices are thin wireless access points (AP) supporting the latest Wi-Fi technologies (multi-user MIMO 802.11ac Wave 1 and Wave 2, 4x4), as well as 802.11n, 802.11AX , and the demand for plug and play deployment.
laltuzar
Staff
Staff
Article Id 304463
Description This post describes the steps to configure an SSID with a bandwidth limited. This feature is useful for example, for a customer that wants to create an SSID for their guests but does not want to share all the bandwidth available.
Scope

FortiOS v7.0 or above, FortiAP v7.0 or above.

This example will use a FortiGate 60E on FortiOS v7.2.7 and a FortiAP 233G v7.4.2.

Solution

This guide assumes that there is a FortiAP already configured on FortiGate and is ready to work.

 

Note:

The traffic shaper in this case is applied to a shared interface. Should you need to apply the traffic shaping per IP traffic shaper must be created, and Per-IP shaper must be used on Traffic-Shaping Policy. More details on this link: Per-IP traffic shaper

 

The step-by-step is as follows:

  1. Create an SSID with Captive Portal. Because FortiOS does not allow to create Open SSIDs without at least a Disclaimer, this is the way to go:

Creating SSIDCreating SSID

 

  1. Apply the SSID on the FortiAP profile.

 

Assigning SSID to FAP ProfileAssigning SSID to FAP Profile

 

Log into the AP and proof the VAP configured is propagating the VAP with OPEN authenticationLog into the AP and proof the VAP configured is propagating the VAP with OPEN authentication

 

  1. Create a Firewall Policy.

Creating a firewall policy to allow traffic to InternetCreating a firewall policy to allow traffic to Internet

 

  1. Create and apply a Traffic Shaping Policy.

Creating a Traffic Shaper - in this example, 5Mbps max for upload and downloadCreating a Traffic Shaper - in this example, 5Mbps max for upload and download


Applying the Traffic Shaper to the Traffic Policy on the SSID for GuestsApplying the Traffic Shaper to the Traffic Policy on the SSID for Guests

 

  1. Test connectivity.

 

User must accept DisclaimerUser must accept Disclaimer

 

Result of Speedtest on SmartphoneResult of Speedtest on Smartphone

Comments
Adolfo_Z_H
Staff
Staff

Nice!