FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Not applicable
Article Id 194474

Description
This article explains how to set up FortiWiFi as an access point on the same subnet as another interface.  For example, where WiFi interfaces sharing same IP subnet range as Internal.
Scope
FortiWiFi model only.
Solution

This example shows how to have internal interface subnets setup as 192.168.10.1/24. It shows how to make the WLAN port work on the same subnet as internal. This will allow wireless clients to also work on the same network as the wired clients.
 
Create a switch interface, and include WLAN and internal port as members, so that LAN segments connect to the member interfaces as bridged, and that hosts can connect to member interfaces in the same subnet.
Run the following commands from FortiGate CLI:
config system switch-interface
edit <new interface name>
set member "internal" "wlan"
set vdom root
end
Note that member interfaces are being more or less deleted so to make this work correctly, it is necessary to delete ALL firewall entities that associated with the member interfaces, this includes firewall policies, firewall addresses, Virtual IPs, IP pools, DHCP server, and routes.



 

Contributors