Configuring a FortiWiFi unit as a wireless client
To set up the FortiWiFi unit as a wireless client, you must use the CLI. Before you do this, make sure to remove any AP WiFi configurations such as SSIDs, DHCP servers, and policies.
To configure wireless client mode
- Change the wireless mode to client. In the CLI, enter the following commands:
config system global
set wireless-mode client
end
- Respond “y” when asked if you want to continue. The FortiWiFi unit reboots.
- Configure the WiFi interface settings.
For example, to configure the client for WPA-Personal authentication on the our_wifi SSID with passphrase justforus, enter the following in the CLI:
config system interface
edit wifi
set mode dhcp
config wifi-networks
edit 0
set wifi-ssid our_wifi
set wifi-security wpa-personal
set wifi-passphrase "justforus"
end
end
The WiFi interface client_wifi receives an IP address using DHCP.
- Configure a WiFi to port1 policy.
You can use either CLI or GUI to do this. The important settings are:
Incoming Interface (srcintf) |
wifi |
Source Address (srcaddr) |
all |
Outgoing Interface (dstintf) |
port1 |
Destination Address (dstaddr) |
all |
Schedule |
always |
Service |
ALL |
Action |
ACCEPT |
Enable NAT |
Selected |
Controlled AP selection support in FortiWiFi client mode
Use the following CLI commands to provide a more controlled AP selection method (supported in FortiWiFi client mode).
Syntax
config system interface
edit {name}
set wifi-ap-band {any | 5g-preferred | 5g-only}
next
end