Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
kdevos
New Contributor

Single SSID with different subsite's VLAN

Hi

I'm currently replace a CISCO wifi solution by FortiAP one.

Actually, SSID'd are the same on all my subsite, but VLAN are different on each subsite.

For example :

[ul]
  • SITE1, SSID=WIFIINVITE on VLAN=125
  • SITE2, SSID=WIFIINVITE on VLAN=135
  • ...[/ul]

    On my forti wifi controller (200D), the SSID is linked to a single VLAN. Is there a way to configure each SSID on each subsite to use a different VLAN ?

     

    Thanks for your help, Kevin

     

  • 12 REPLIES 12
    kdevos

    Yes, but i would like to keep a logic association of VLAN and subnets.

    So no way with fortinet :) I will keep cisco.

    yzhang_FTNT

    The wtp-group based VLAN feature in FOS 5.4 release could solve your issue.  This feature is only supported in the CLI at this time.

     

    You first create wtp-groups, then under the vap config, you can create vlan-ID/wtp-group pairs.

     

    If a WTP is assigned to a wtp-group, its client will be tagged with the vlan-id associated with wtp group.

     

     

    bravishank_FTNT

    Follow the below configuration for WTP-Group based on VLAN Pool

     

    FGT-ABC # show wireless-controller wtp-group Group-223B config wireless-controller wtp-group     edit "Group-221B"         set platform-type 221B ----------------------> Platform Type         config wtp-list             edit "FP221B3X15001114"-------------------> FAP Serial Number             next         end     next

    edit "Group-223B"         set platform-type 223B ----------------------> Platform Type         config wtp-list             edit "FP223B3X15001115"-------------------> FAP Serial Number             next         end     next end FGT-ABC # show wireless-controller vap WTP-Group        config wireless-controller vap     edit "WTP-Group"         set vdom "root"         set ssid "WTP-Group"         set schedule "always"         set vlan-pooling wtp-group-------------------> VLAN Pool to WTP-Group         config vlan-pool             edit 101-----------------------------------> VLAN ID for Wireless Clients                 set wtp-group "Group-221B"

                next

                edit 102-----------------------------------> VLAN ID for Wireless Clients

                    set wtp-group "Group-223B"             next         end         set passphrase ENC IkCbYh/M9oxQFnGijRRGf08J4LMc3njIrd7bvFYupyn1JxbgJUITyAT4NnJepMi2lfutuX4xQ4KKwNtwo6zd6aAzgmUw3B3VqprDFWZztnShVVULDjHE37BmHHVul3d0VQ8+gjXGETwRYV+XGA7Y1emtykO8CLIALqSIaPw4xUe23E79ADI73JeQAOz5smpbz1AZvA==     next end

     

    You can add upto 8 VLAN IDs in a VAP.

    Balaji

    Announcements

    Select Forum Responses to become Knowledge Articles!

    Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

    Labels
    Top Kudoed Authors