Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
THL
New Contributor

Add more than 5 FortiAP

Hello,

 

I have a Fortigate 60C and 7 FortiAP. I know i can't add all my AP to the Fortigate in normal mode.

 

I read this http://kb.fortinet.com/kb/documentLink.do?externalID=FD36164

But what i don't understand is what involve the bridge mode ?

 

Is there a way to add two differents SSID to an AP, one in bridge mode and the other in normal ?

 

Thanks

1 Solution
Jeroen

THL wrote:

OK, i have my vlan and my two SSID.

I activate Captive portal on the Vlan interface but how do i know this portal is for my guest SSID ?

You can select the user group when you activated Captive portal. After that you can configure a new SSID with the vlan number that you gave to your vlan. If the switch is configured correctly than you can login to the new configured SSID and than you should get the Captive portal you configured on the interface. Don't forget to create new policy's for the new VLAN.

View solution in original post

5 REPLIES 5
Jeroen
Contributor

Hello THL,

 

It is possible to add one SSID in bridge mode and the other one in normal mode. But this doesn't solve your problem with the limit. Because when the mixed mode is active the lowest amount of possible AP is selected in your case normal mode.

 

When you putt everything in bridge mode then you can register more then 5 AP. Bridge mode is simply a local break out to a VLAN. So the traffic doesn't directly travel to the Fortigate unit with the use of a tunnel. But is put on a VLAN for example a office vlan or a guest vlan.

 

What you need to do in case of bridge mode is creating the following networks:

[ol]
  • Untagged - Management CAPWAP enabled gateway interface - This will provision your AP's
  • Tagged - (Example) Office network (local break-out)
  • Tagged - (Example) Guest network (local break-out)[/ol]

    Hope this helps you.

     

    THL wrote:

    Hello,

     

    I have a Fortigate 60C and 7 FortiAP. I know i can't add all my AP to the Fortigate in normal mode.

     

    I read this http://kb.fortinet.com/kb/documentLink.do?externalID=FD36164

    But what i don't understand is what involve the bridge mode ?

     

    Is there a way to add two differents SSID to an AP, one in bridge mode and the other in normal ?

     

    Thanks

  • THL
    New Contributor

    Hello Jeroen,

     

    Thank for your answer.

    If i want to create a captive portal for my guest ? because i don't see any possibilities in local bridge mode

     

    mail@jeroenmelis.nl wrote:

    Hello THL,

     

    It is possible to add one SSID in bridge mode and the other one in normal mode. But this doesn't solve your problem with the limit. Because when the mixed mode is active the lowest amount of possible AP is selected in your case normal mode.

     

    When you putt everything in bridge mode then you can register more then 5 AP. Bridge mode is simply a local break out to a VLAN. So the traffic doesn't directly travel to the Fortigate unit with the use of a tunnel. But is put on a VLAN for example a office vlan or a guest vlan.

     

    What you need to do in case of bridge mode is creating the following networks:

    [ol]
  • Untagged - Management CAPWAP enabled gateway interface - This will provision your AP's
  • Tagged - (Example) Office network (local break-out)
  • Tagged - (Example) Guest network (local break-out)[/ol]

    Hope this helps you.

  • Jeroen

    You can enable a Captive portal on the vlan interface in your fortigate unit. System > Network > Interfaces > Security mode > Captive Portal

     

    THL wrote:

    Hello Jeroen,

     

    Thank for your answer.

    If i want to create a captive portal for my guest ? because i don't see any possibilities in local bridge mode

    Hallo THL,

     

    THL
    New Contributor

    OK, i have my vlan and my two SSID.

    I activate Captive portal on the Vlan interface but how do i know this portal is for my guest SSID ?

     

     

    Jeroen

    THL wrote:

    OK, i have my vlan and my two SSID.

    I activate Captive portal on the Vlan interface but how do i know this portal is for my guest SSID ?

    You can select the user group when you activated Captive portal. After that you can configure a new SSID with the vlan number that you gave to your vlan. If the switch is configured correctly than you can login to the new configured SSID and than you should get the Captive portal you configured on the interface. Don't forget to create new policy's for the new VLAN.

    Labels
    Top Kudoed Authors