Chapter 6 Deploying Wireless Networks for FortiOS 5.0 : Access point deployment : Discovering and authorizing APs : Configuring the network interface for the AP unit
  
Configuring the network interface for the AP unit
The interface to which you connect your wireless access point needs an IP address. No administrative access, DNS Query service or authentication should be enabled.
To configure the interface for the AP unit - web-based manager
1. Go to System > Network > Interfaces and edit the interface to which the AP unit connects.
2. Set Addressing Mode to Dedicate to FortiAP.
3. Enter the IP address and netmask to use.
This FortiGate unit automatically configures a DHCP server on the interface that will assign the remaining higher addresses up to .254 to FortiAP units. For example, if the IP address is 10.10.1.100, the FortiAP units will be assigned 10.10.1.101 to 10.10.1.254. To maximize the available addresses, use the .1 address for the interface: 10.10.1.1, for example.
4. Select OK.
To configure the interface for the AP unit - CLI
In the CLI, you must configure the interface IP address and DHCP server separately.
config system interface
edit port3
set mode static
set ip 10.10.70.1 255.255.255.0
end
config system dhcp server
edit 0
set interface "dmz"
config ip-range
edit 1
set end-ip 10.10.70.254
set start-ip 10.10.70.2
end
set netmask 255.255.255.0
set vci-match enable
set vci-string "FortiAP"
end
The optional vci-match and vci-string fields ensure that the DHCP server will provide IP addresses only to FortiAP units.