Setting up a WiFi Bridge with a FortiAP

In this example you will set up a WiFi network with a FortiGate managing a FortiAP in Bridge mode.

You can configure a FortiAP unit in either Tunnel or Bridge mode. When a FortiAP is in Bridge mode, the Ethernet and WiFi interfaces are connected (or bridged), allowing wired and wireless networks to be on the same subnet. Tunnel mode is the default mode for a FortiAP. A FortiAP in Tunnel mode uses a wireless-only subnet for wireless traffic.

For information about using a FortiAP in Tunnel mode, see Setting up WiFi with a FortiAP.

_{Find this recipe for other FortiOS versions}
_{5.2 | 5.4}

1. Connecting and authorizing the FortiAP unit
Connect the FortiAP to the lan interface.
Go to WiFi & Switch Controller > Managed FortiAPs. The FortiAP is listed. The device is not yet authorized, as indicated by the in the State column. By default, the FortiGate adds newly discovered FortiAPs to the Managed FortiAPs list but does not authorize them.
Highlight the FortiAP unit on the list and select Authorize. After a few minutes, hit the Refresh button and will appear to tell you that the device is authorized.
2. Creating an SSID
Go to WiFi & Switch Controller > SSID and create a new SSID. Set Traffic Mode to Local bridge with FortiAP’s Interface. Configure the WiFi Settings as you would for a regular wireless network and set a secure Pre-shared Key.
3. Creating a custom FortiAP profile
Go to WiFi & Switch Controller > FortiAP Profiles and create a new profile. Set Platform to the FortiAP model you are using (FAP11C). Set SSID to use the new SSID. Set LAN Port mode to bridge to the new SSID.
Go to WiFi & Switch Controller > Managed FortiAPs and edit the FortiAP. Set FortiAP Profile to the new profile. You have the option to enter a name for the FortiAP (MyFortiAP in this example). If you don’t, the FortiAP will be identified by its serial number.
4. Results
Connect to the SSID with a wireless device. After a connection is established, you can browse the Internet using the wireless network configured in this recipe.
Go to FortiView > All Sessions and observe the wireless activity. Hover over the Device column to see details.