Configure by CLI, wi-fi in fortiwifi 60D

[Luis123]

Hello

Please, can you give me an example about the configuration of Wi-fi by CLI in Fortiwifi 60D with wpa2?

Thanks in advance

Regards!

[ShrewLWD · Accepted solution]

Hi Luis,

What firmware version are you running?  In 5.2.x, wpa2 (AES) is the default, so you really only need to add the name of the wireless interface, your SSID, and your password.

(this is the default code for an out-of-the-box 5.2.x, with the SSID line changed).

config wireless-controller vap

    edit "wifi"

        set vdom "root"

        set ssid "SSIDNameHere"

        set passphrase ENC mxdSX1C9IVVKmGMBqV+k3C5cQXT6Bzfh+NtWP6pBG6zwEQOnSoangyqfSJdBKVqK9apt9ymAObv3Uy1TuRa0JkuXCBI2bULyDXVdCjVMwuuiXWky8XXCq5OrM7UBR1lh/iKb3zUhFYEibZis2m0ZsjN/Y+fD7gssQo0XbQMJtkAjzC9BMVKXP+xgyl597ZQwRe9cdg==

    next

end

In earlier versions you would need to set additional lines such as;

     set security wpa2-only-personal

     set encrypt AES

You can type your passphrase in the CLi in plaintext, omitting the ENC, and it will encrypt it for you afterwards

e.g. set passphrase ThisIsMyUnsecureWirelessPassphrase

it will save that line as

set passphrase ENC mxdSX1bnrUCoHgRPexacifVpWDwrYqmCcPj+B69rYJuCwvgsG6dMAzRI+YEeh6sgzIGoLIKAkjYdgTerW8Q7yaehQc0/PUehFMKrB4pXSQubvv49Q+IWZiYqNmLvrjGchxeKSB1yty6/MnqVnprjfaQ1FCAxzzqf6h+1l16VsfiSJxf1xh4k0CeuhuwZgbp/gviqRQ==

[Luis123]

Hi  ShrewLWD

It is a FortiGate 5.2.2,build0642 (GA)

Can be this an example?:

config wireless-controller vap    edit "wifi"        set vdom "root-0"        set ssid "SSID-examp"        set passphrase example1    nextend

Acoording your explanation, it is wpa2, right?

Regards!

ShrewLWD Gold Member  Total Posts : 136Scores: 2Reward points: 0Joined: 4/23/2009Status: offline[/ul] Re: Configure by CLI, wi-fi in fortiwifi 60D 2 hours ago (permalink)☄ Helpful     0 Hi Luis, What firmware version are you running?  In 5.2.x, wpa2 (AES) is the default, so you really only need to add the name of the wireless interface, your SSID, and your password.   (this is the default code for an out-of-the-box 5.2.x, with the SSID line changed).   config wireless-controller vap     edit "wifi"         set vdom "root"         set ssid "SSIDNameHere"         set passphrase ENC mxdSX1C9IVVKmGMBqV+k3C5cQXT6Bzfh+NtWP6pBG6zwEQOnSoangyqfSJdBKVqK9apt9ymAObv3Uy1TuRa0JkuXCBI2bULyDXVdCjVMwuuiXWky8XXCq5OrM7UBR1lh/iKb3zUhFYEibZis2m0ZsjN/Y+fD7gssQo0XbQMJtkAjzC9BMVKXP+xgyl597ZQwRe9cdg==     next end   In earlier versions you would need to set additional lines such as;      set security wpa2-only-personal      set encrypt AES   You can type your passphrase in the CLi in plaintext, omitting the ENC, and it will encrypt it for you afterwards e.g. set passphrase ThisIsMyUnsecureWirelessPassphrase   it will save that line as

set passphrase ENC mxdSX1bnrUCoHgRPexacifVpWDwrYqmCcPj+B69rYJuCwvgsG6dMAzRI+YEeh6sgzIGoLIKAkjYdgTerW8Q7yaehQc0/PUehFMKrB4pXSQubvv49Q+IWZiYqNmLvrjGchxeKSB1yty6/MnqVnprjfaQ1FCAxzzqf6h+1l16VsfiSJxf1xh4k0CeuhuwZgbp/gviqRQ==

  Answer Unhelpful Report AbuseForward  Quote   #1   Luis123 Quick Reply: (Open Full Version)        Paragraph Font Family Font Size                  Path: p   Preview    Submit Post     Home » All Forums » [link=https://forum.fortinet.com/tt.aspx?forumid=119][Other FortiGate and FortiOS Topics][/link] » System settings » Configure by CLI, wi-fi in fortiwifi 60D Jump to:  Jump to - - - - - - - - - -  [FortiGate / FortiOS UTM features] - - - - AntiVirus - - - - Application Control - - - - Data Leak Prevention (DLP) - - - - Email filtering (AntiSPAM) - - - - Former Content Management Forum - - - - Intrusion Detection & Prevention - - - - Web Filtering [Fortinet Beta Programs] - - - - Beta Message Board [Fortinet Services] - - - - FortiCloud Threat Detection Service [Other FortiGate and FortiOS Topics] - - - - Firewall  - - - - Log & Report - - - - Miscellaneous -- FortiOS and FortiGate - - - - New Features -- FortiOS - - - - Routing and Transparent Mode - - - - System settings - - - - User and Authentication - - - - VPN [Other Fortinet Products] - - - - AscenLink - - - - Coyote Point - - - - FortiAnalyzer - - - - FortiAP - - - - FortiAuthenticator - - - - FortiBalancer - - - - FortiBridge - - - - FortiCache - - - - FortiCamera & FortiRecorder - - - - FortiCarrier  - - - - FortiClient - - - - FortiConverter - - - - FortiDB - - - - FortiDDOS - - - - FortiDirector - - - - FortiDNS - - - - FortiExplorer - - - - FortiGuard - - - - FortiMail - - - - FortiManager - - - - FortiPlanner - - - - FortiSandbox - - - - FortiScan - - - - FortiSwitch - - - - FortiToken - - - - FortiVoice - - - - FortiWeb - - - - FortiWiFi [Forum Information & Miscellaneous Topics] - - - - Forum News - - - - Ideas for Forum Site - - - - Fortinet Cookbook - - - - Knowledge Base - - - - Technical -- non-FortiOS - - - - Miscellaneous -- non-technical      © 2015 APG vNext Commercial Version 5.5   Latest Posts    What exactly does this mean? Re: FortiClient VPN Problems With OSX 10.11 El Capitan Re: Configure by CLI, wi-fi in fortiwifi 60D FortiClient SSO Mobility Agent Re: Report for Specific User and Destination IP Range Re: Report for Specific User and Destination IP Range Configure by CLI, wi-fi in fortiwifi 60D Re: NAT Internal Traffic Re: Report for Specific User and Destination IP Range Re: HA across comcast switched fiber network [/ul] Active Posts    FortiClient VPN Problems With OSX 10.11 El Capitan NAT Internal Traffic Mixed up Timestamps in Netflow Captive Portal & OpenLDAP Limited CLI commands available SSLVPN stops at 10% Country code on FortiAP-11C not changing FAC and FSSO TLS v1.2 not provided in FGT 5.0? Receiving Attachment Size [/ul] All FAQs    New features : Changing your email, screen name & username New features: Private Messaging New features: Marking posts as 'Answer' or 'Helpful'. Using 'Report Abuse' and Ticket List [/ul] ShrewLWD

[ShrewLWD]

Yes, that is correct.  You can always double check yourself by doing;

config wireless-controller vap   

edit "wifi"

show full

It will then show you all the possible settings options, and their defaults.

Those two lines should read;

     set security wpa2-only-personal      set encrypt AES