Chapter 6 Deploying Wireless Networks for FortiOS 5.0 : Wireless network examples : A more complex example : Configuring the SSIDs
  
Configuring the SSIDs
First, establish the SSIDs (network interfaces) for the employee and guest networks. This is independent of the number of physical access points that will be deployed. Both networks assign IP addresses using DHCP.
To configure the employee SSID - web-based manager
1. Go to WiFi Controller > WiFi Network > SSID and select Create New.
2. Enter the following information and select OK:
Interface Name
example_inc
IP/Netmask
10.10.120.1/24
Administrative Access
Ping (to assist with testing)
SSID
example_inc
Enable DHCP
Enable
  Address Range
10.10.120.2 - 10.10.120.199
  Netmask
255.255.255.0
  Default Gateway
Same As Interface IP
  DNS Server
Same as System DNS
Security Mode
WPA/WPA2-Enterprise
Data Encryption
AES
Authentication
Select Usergroup, then select employee-group.
Leave other settings at their default values.
To configure the employee SSID - CLI
config wireless-controller vap
edit example_inc
set ssid "example_inc"
set security wpa-enterprise
set auth usergroup
set usergroup employee-group
end
config system interface
edit example_inc
set ip 10.10.120.1 255.255.255.0
end
config system dhcp server
edit 0
set default-gateway 10.10.120.1
set dns-service default
set interface example_inc
config ip-range
edit 1
set end-ip 10.10.120.199
set start-ip 10.10.120.2
end
set lease-time 7200
set netmask 255.255.255.0
end
To configure the example_guest SSID - web-based manager
1. Go to WiFi Controller > WiFi Network > SSID and select Create New.
2. Enter the following information and select OK:
Name
example_guest
IP/Netmask
10.10.115.1/24
Administrative Access
Ping (to assist with testing)
SSID
example_guest
Enable DHCP
Enable
  Address Range
10.10.115.2 - 10.10.115.50
  Netmask
255.255.255.0
  Default Gateway
Same as Interface IP
  DNS Server
Same as System DNS
Security Mode
Captive Portal
Customize Portal Messages
Select
User Groups
Select guest-group
Leave other settings at their default values.
To configure the example_guest SSID - CLI
config wireless-controller vap
edit example_guest
set ssid "example_guest"
set security captive-portal
set selected-usergroups guest-group
end
config system interface
edit example_guest
set ip 10.10.115.1 255.255.255.0
end
config system dhcp server
edit 0
set default-gateway 10.10.115.1
set dns-service default
set interface "example_guest"
config ip-range
edit 1
set end-ip 10.10.115.50
set start-ip 10.10.115.2
end
set lease-time 7200
set netmask 255.255.255.0
end