Enter a name for the SSID.

Select the traffic mode from the drop-down list. The available options are: Tunnel to Wireless Controller, Local bridge with FortiAP’s Interface, and Mesh Downlink.

Select to enable common interface settings.

Only available when Traffic Mode is set to Tunnel to Wireless Controller.

Enter the IP address and network mask.

Only available when Traffic Mode is set to Tunnel to Wireless Controller.

Select the allowed administrative service protocols from: HTTPS, HTTP, PING, SSH, Telnet, SNMP, FMG-Access, Auto IPsec Request, and FCT-Access.

Only available when Traffic Mode is set to Tunnel to Wireless Controller.

Select to enable and configure DHCP.

Only available when Traffic Mode is set to Tunnel to Wireless Controller.

Enter the DHCP address range.

Enter the netmask.

Select Same As Interface IP if the default gateway is the same as the interface IP, or select Specify and enter a new gateway.

Select Same As System DNS if the DNS server is the same as the system DNS, or select Specify and enter a DNS server address.

The MAC address control list allows you to view the MAC addresses and their actions. It includes a default entry for unknown MAC addresses.

Select Create New to create a new IP MAC binding.

Select an address and then select Edit to edit the default action for unknown MAC addresses or your IP MAC bindings.

Select an address or addresses and then select Delete to delete the selected items. The unknown MAC address cannot be deleted.

 

Enter the wireless service set identifier (SSID) or network name for this wireless interface. Users who want to use the wireless network must configure their computers with this network name.

Select a security mode. The options are: WEP64, WEP128, WPA/WPA2-PERSONAL, WPA/WPA2-ENTERPRISE, Captive Portal, OPEN, WPA-ONLY-PERSONAL, WAP-ONLY-ENTERPRISE, WPA2-ONLY-PERSONAL, or WPA2-ONLY-ENTERPRISE.

Captive Portal is not available if the traffic mode is set to Mesh Downlink.

When Traffic Mode is set to Mesh Downlink, the security mode options are: WPA/WPA2-PERSONAL, OPEN, WPA-ONLY-PERSONAL, or WPA2-ONLY-PERSONAL.

Select 1, 2, 3, or 4 from the drop-down menu.

Many wireless clients can configure up to four WEP keys. Select which key clients must use.with this access point. This is available when security is a WEP type.

This option is only available when Traffic Mode is set to Tunnel to Wireless Controller or Local bridge with FortiAP’s Interface.

Enter 10 Hex digits for the key value.

This option is only available when Traffic Mode is set to Tunnel to Wireless Controller or Local bridge with FortiAP’s Interface.

Select the data encryption method. The options are: AES, TKIP, and TKIP-AES.

This option is only available when the security mode is set to WPA.

Enter the pre-shared key for the SSID.

This option is only available when the security mode is set to WPA-Personal.

Select to enable or disable detect and identify devices. When this setting is configured as enable, you can select to Add New Devices to Vulnerability Scan List.

Select the authentication method for the SSID, either a RADIUS server or a user group, then select the requisite server or group from the respective drop-down list.

This option is only available when the security mode is set to WPA-Enterprise.

Select to allow for customized portal messages.

This option is only available when the security mode is set to Captive Portal.

Select the user groups to add from the Available user group box. Use the arrow buttons to move the desired user groups to the Selected user groups box.

This option is only available when the security mode is set to Captive Portal.

Select to block intra-SSID traffic.

This option is only available when Traffic Mode is set to Tunnel to Wireless Controller.

Select to limit the concurrent WiFi clients that can connect to the SSID. If selected, enter the desired maximum number of clients. Enter 0 for no limit.

This option is only available when Traffic Mode is set to Tunnel to Wireless Controller or Local bridge with FortiAP’s Interface.

Configure advanced options for the SSID.

Enable broadcast of the SSID. Broadcasting the SSID enables clients to connect to your wireless network without first knowing the SSID. For better security, do not broadcast the SSID.

Prevent ARP or DHCP messages being carried to other access points carrying the same SSID. Select DHCP and/or ARP broadcast suppression.

Enable dynamic VLAN assignment for users based RADIUS attribute.

Enable or disable pre-authentication with external non-managed access points.

Select to enable or disable fast roaming. Enabling fast-roaming enables pre-authentication where supported by clients.

Set the WPA re-key interval. Some clients may require a longer interval. Range 60 to 864 000 seconds.

Enable authentication of clients by the FortiAP unit if the wireless controller is unavailable. This applies only if security is a WPA-Personal mode and local-bridging is enabled.

Enable or disable bridging of local VAP interfaces.

Set the multicast enhancement threshold. Enter the threshold value in the text field.

Select to enable or disable multicast enhance.

Select the portal message override group from the drop-down menu.

Enter the re-key interval value in the text field.

Select to enable or disable RADIUS MAC authentication.

Select the RADIUS MAC authentication server from the drop-down list.

Select to enable or disable automatic VLAN assignment for authenticated users of this SSID.

Enter the VLAN ID in the text field. Enter 0 is VLANs are not used.

Select a device from which to import the SSID or SSIDs from the drop-down list. This list will include all the devices available in the ADOM.

Is applicable, select the virtual domain from which the SSIDs will be imported.

The available objects that can be imported.

Select an object or objects and then select the down arrow to move the selected object or objects to the Selected Objects List.

The objects that are to be imported.

To remove an object or objects from the list, select the object or objects and then select the up arrow. The selected items will be moved back to the Available Objects List.

Select to create a new name for the object or objects that are being imported, and then enter the name in the field.