Assigning WiFi users to VLANs dynamically
Virtual LANs (VLANs) are used to assign wireless users to different networks without requiring the use of multiple SSIDs. Each user’s VLAN assignment is stored in the user database of the RADIUS server that authenticates the users.
This example creates dynamic VLANs for the Techdoc and Marketing departments. The RADIUS server is a FortiAuthenticator. It is assumed a user group on the FortiAuthenticator has already been created (in this example, employees).
config certificate ca edit {name} # CA certificate. set name {string} Name. size[79] set ca {string} CA certificate as a PEM file. set range {global | vdom} Either global or VDOM IP address range for the CA certificate. global Global range. vdom VDOM IP address range. set source {factory | user | bundle} CA certificate source type. factory Factory installed certificate. user User generated certificate. bundle Bundle file certificate. set trusted {enable | disable} Enable/disable as a trusted CA. set scep-url {string} URL of the SCEP server. size[255] set auto-update-days {integer} Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled). range[0-4294967295]