Configuring a WPA2-Enterprise with FortiAuthenticator as the RADIUS server

To configure a WPA2-Enterprise WLAN:

1. Go to WiFi & Switch Controller > SSIDs.
2. From the Create New dropdown, select SSID.
3. Enter a Name for the interface. Optionally, you can enter an alias.
4. In Traffic mode, select Bridge.
5. In the WiFi settings pane:
   1. Enter a name in the SSID field.
   2. Enable Broadcast SSID.
   3. In Security mode dropdown, select WPA2 Enterprise.
   4. In Authentication, select RADIUS Server, and from the dropdown select the FortiAuthenticator RADIUS server you created.
   5. Optionally, enable Dynamic VLAN assignment.
   6. For Schedule, select always.
   7. Optionally, enable Block intra-SSID traffic.
   8. Optionally, enable Broadcast suppression, and select ARPs for known clients, DHCP unicast, DHCP uplink, IPv6, ALL other broadcast, and All other multicast.
6. Click OK to save changes.