asked on Guest SSID config on Cisco AP
Here is the scenario:
I have two Cisco AP's and one Fortigate Firewall. The AP's are directly connected to the inside zone of Fortigate firewall 60D.
Model of CIsco AP: AIR-SAP702i-N-K9
Model of Fortigate Firewall is: Fortigate 60D.
On Fortigate firewall 60D, we have 8 ports facing inside network, one is connected to outside network(to ISP) and other is connected to DMZ.
Here I wish to configure Guest SSID and User SSID on Cisco AP which is in standalone mode. I have configured User SSID and both are working fine. The inside network is 192.168.1.0/24 and Gateway is 192.168.1.99.
Need help to configure Guest SSID on AP and the changes required on the Fortigate firewall. Assume Port 1 & 2 are connected to Cisco AP.
Thanks
Sub
I have two Cisco AP's and one Fortigate Firewall. The AP's are directly connected to the inside zone of Fortigate firewall 60D.
Model of CIsco AP: AIR-SAP702i-N-K9
Model of Fortigate Firewall is: Fortigate 60D.
On Fortigate firewall 60D, we have 8 ports facing inside network, one is connected to outside network(to ISP) and other is connected to DMZ.
Here I wish to configure Guest SSID and User SSID on Cisco AP which is in standalone mode. I have configured User SSID and both are working fine. The inside network is 192.168.1.0/24 and Gateway is 192.168.1.99.
Need help to configure Guest SSID on AP and the changes required on the Fortigate firewall. Assume Port 1 & 2 are connected to Cisco AP.
Thanks
Sub
Wireless NetworkingNetwork Security
Last Comment
tmoore1962
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Pls correct me if I am wrong:
We need to create one more vlan for Guests users on Fortigate firewall.
Create a Guest SSID on both AP's. Associate to the Guest Vlan and map it to the port.
make the port as trunk port on Fortigate firewall (connected to AP) allowing both the vlans to pass through.
Create access rules on Fortigate firewall 60 D.
Assume the domain users are in subnet 192.168.1.0/24. gateway of firewall is 192.168.1.99. and Guest Users to be in 172.168.10.0/24
My question:
How do we make it as trunk port on Forigate firewall 60D. Any documents supporting the config for Fortigate 60 D will be helpful,.
Thanks
Subhashis