FortiOS Handbook - Deploying Wireless Networks

Defining a wireless network interface (SSID)
Configuring a WiFi LAN
4. In Primary Server Secret, enter the shared secret used to access the server.
5. Optionally, enter the information for a secondary or backup RADIUS server.
6. Select OK.
To configure the FortiGate unit to access the RADIUS server - CLI
config user radius
edit exampleRADIUS
set auth-type auto
set server 10.11.102.100
set secret aoewmntiasf
end
To configure WPA-Enterprise security - web-based manager
1. Go to WiFi & Switch Controller > SSIDand edit your SSID entry.
2. In Security Mode, select WPA2 Enterprise.
3. In Authentication, do one of the following:
• If you will use a RADIUS server for authentication, select RADIUS Server and then select the RADIUS server.
• If you will use a local user group for authentication, select Local and then select the user group(s) permitted to
use the wireless network.
4. Select OK.
To configure WPA-Enterprise security - CLI
config wireless-controller vap
edit example_wlan
set security wpa2-enterprise
set auth radius
set radius-server exampleRADIUS
end
Captive Portal security
Captive Portal security provides an access point that initially appears open. The wireless client can connect to the
AP with no security credentials. The AP responds to the client’s first HTTP request with a web page requesting
user name and password. Until the user enters valid credentials, no communication beyond the AP is permitted.
The captive portal can be hosted on the FortiGate unit, or externally. For details see
Configuring WiFi captive portal security - FortiGate captive portal on page 40
Configuring WiFi captive portal security - external server on page 41
For general information about captive portals, see the Captive Portal chapter of the Authentication Guide.
Adding a MAC filter
On each SSID, you can create a MAC address filter list to either permit or exclude a list of clients identified by
their MAC addresses.
38 Deploying Wireless Networks for FortiOS 5.4
Fortinet Technologies Inc.