FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Article Id 256934

This article explains how to add an SSID interface to a Softswitch.

Scope FortiGate.

1) Create an SSID or edit the wanted SSID. For this, go to Wifi & Switch Controller -> SSID,

select ‘Create New’ or select an existing one and select ‘Edit’.


Here is an example of what it should look like:




The key areas to configure are:

- Select Traffic Mode as Tunnel Mode.

- Put the IP address as

Disable ‘Create address object matching subnet’ (This is enabled by default and must be disabled).


The rest of the settings can be configured as per requirement.

Select 'Ok' at the end to finish creating the SSID.


2) Add it to the Softswitch. For this, go to Network -> Interfaces, either select an existing SoftSwitch or select 'Create New'.


This is an example of what it should look like:




Here, ‘Type’ as ‘Software Switch’ has been selected. The SSID shows up under Interface members.

It is possible to configure the rest of the settings as per requirement and then, select ‘Ok’.