Guest Network

[jklapel]

I am trying to setup a guest VLAN network using our FortiAPs and Fortigate.  For the guest wifi, I would like to use WPA Personal with Captive Portal, which dictates that we use "Tunnel to Wireless Controller" as I understand it.  This way we can see who is connected to the guest wireless.  However, we are also going to have several wired LAN devices that need to be on the same guest network.  When they reach the Fortigate, packets will already be tagged with the guest VLAN tag, so the Fortigate just needs to make sure to hand out an IP that is in the guest VLAN.  I had this mostly working before, however, the complicating factor is that we run scripts that use broadcast packets to find where specific devices are on the network, and these broadcast packets need to cross from the wireless side to the wired side.  Any recommendations on how to set this up?