Technical Tip: How to create a new Bridge mode SSID with dedicated VLAN for users

Description

This article describes how to create a new SSID in Bridge mode using a dedicated VLAN for Wireless clients.

Scope

All FortiGates as Wireless LAN Controllers.

Solution

1. Create a new VLAN and enable a DHCP Server for the IP address assignments to the client devices:

2. In the WiFi & Switch Controller, add the new VLAN to the 'Allowed VLANs' section.

   Repeat this for each FortiSwitch port where a FortiAP is connected that will be broadcasting the bridge mode SSID.

    

   

    

    

3. Create a new SSID with Traffic mode set to Bridge and set the VLAN ID under Optional VLAN ID.

    

   

    

    

4. Create a Firewall Policy (in the example, to allow the new VLAN to access the Internet):

    

   

    

    

5. Connect a device to the new SSID and then browse to WiFi & Switch Controller -> WiFi Clients. The device will obtain an IP Address from the new VLAN and have Internet access.

    

Note:

The WI-FI in bridge mode is required when directly bridging a Wi-Fi interface with Ethernet in a Layer 2 switch to allow traffic between the members.