How to add WiFi interface to SD-WAN zone

[yutasa]

I can't figure this out. I created an SSID (wifi) which got added to the wqt.root software switch as wqtn.30.wifi. I understand you can't add an interface to SD-WAN if it's in use, but removing wqtn.30.wifi from the software switch only makes wqtn.30.wifi available to add as a member in SD-WAN, not the actual WiFi interface.

I've tried adding wqtn.30.wifi to the SD-WAN zone, but the policies don't seem to be working the way I'd expect them to.

What's the trick to getting the WiFi added to SD-WAN?

[funkylicious]

hi,

wifi ssid's cannot be added as SDWAN members, https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/942095/sd-wan-members-and-zo... 

[Carson_Daniels]

You can’t add a WiFi SSID directly to an SD-WAN zone — only routed interfaces can be SD-WAN members.
Your SSID (wqtn.30.wifi) sits inside the software switch, so SD-WAN never sees it as a WAN interface.

To fix it, you must break the SSID out of the switch and turn it into a standalone L3 interface:

1. Delete the SSID from the software switch (wqt.root).

2. Create a VLAN or physical L3 interface for the SSID:

   • config wireless-controller vap → assign VLAN X

   • config system interface → create VLAN X, give it an IP, and set its role = WAN

3. Assign the interface to the appropriate zone / sdwan-member:

   • config system sdwan → config members → add interface = <vlan-interface>

4. Add SD-WAN rules / services as usual.

Key point: SD-WAN cannot operate across a software switch because switching = Layer 2. SD-WAN requires a routed L3 interface. Once you give the SSID its own L3 interface, SD-WAN policies will apply correctly.