Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

Mixing SSID traffic modes

All our SSID's are tunneled. But now I need a locally bridged SSID (name "tech") in a separate VLAN (eg VLAN20). VLAN20 is an existing VLAN interface on the Fortigate (serving as gateway, DHCP, DNS...).

A few existing tunneled SSID's and the new bridged SSID need to be available on the same access points.


Fortigate is still on 5.8.6.

Switchport where the access point is connected should accept both VLANs: CAPWAP untagged/default, VLAN20 tagged (since I guess AP is tagging bridged traffic with setting "Optional VLAN ID" in SSID config on the fortigate).


My wifi client authenticates fine to SSID tech (WPA2 pre shared key for testing), but does not get an IP from DHCP. With manual IP on the client device, I can't even ping the VLAN20 interface IP (gateway). Nothing of significance in logs either...


I must be missing something.

Is it even possible ?


New Contributor

Ok, got it working, so it is possible.


VLAN was missing on a trunk somewhere in between...


Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Top Kudoed Authors