Technical Tip: How to choose security mode for the wireless interface via CLI

[mibekwe]

Description

This article describes the steps for choosing the security mode for the wireless interface via CLI.

Scope

FortiGate.

Solution

CLI:

config wireless-controller vap
    edit <vap_name>
        set security <options>
end

Where <vap_name> is the name for this Virtual Access Point.

Available options for security:

open                                 Open
captive-portal                       Captive portal.
wpa-personal                         WPA/WPA2 personal.
wpa-personal+captive-portal          WPA/WPA2 personal with captive portal.
wpa-enterprise                       WPA/WPA2 enterprise.
wpa2-only-personal                   WPA2 personal.
wpa2-only-personal+captive-portal    WPA2 personal with captive portal.
wpa2-only-enterprise                 WPA2 enterprise.

Wireless users must use the same security mode to be able to connect to this wireless interface.

Starting with v7.4.4 and later, the captive portal is an independent setting, separated from the wireless authentication methods.

Troubleshooting Tip: How to set up a captive portal managed by FortiGate over a FortiAP SSID