How to configure bridgemode ap nac policy.

[Ut_Ut]

Fortigate + Fortiswitch + Fortiap, wired and wireless NAC work fine on their own. But how to configure nac for bridge ssid configure for a vlan created under Fortilink. Briefly there is Vlan 10 under fortilink. When I apply Fortiswtich port nac mode, wired users are successfully logging in and getting ip. How do I apply this to wireless users. How do I ensure that both wired and wireless users get ip from the same network and are included in the same vlan.

[AEK]

Hope this helps:

https://community.fortinet.com/t5/FortiAP/Technical-Tip-How-to-configure-NAC-Policies-for-WLAN/ta-p/...

[Ut_Ut]

Are there steps on how to do it via gui

[AEK]

I don't find the exact config via GUI, but you can translate the provided CLI commands to GUI operations.

Besides, it is good to learn how to configure via CLI, since many configurations are done via CLI only.

[Ut_Ut]

friends, no one has understood the issue. NAC works successfully with the vlans configured under the Fortilink interface. If you want to publish a single SSID and include wireless users in these same vlans. Under the created bride ssıd interface, you recreate the vlan id information you created under the fortilink interface to be the same. For example, let's say there are wired onboarding vlan 10, vlan 20, vlan 30 on the fortilink interface and their gateway information dhcp information is configured. In the same way, it should be created with the same id under wifi ssid, but network information should not be entered. only the trunk connection should be created with fortilink by entering the vlan id of interest.