Ruckus with Fortigate firewall

[mehdi_mohsin]

Hello People ,
Greeting of the Day. I very beginner in IT area. I have Ruckus Wireless access point and i have to give access to Guests (which i already have done that how to do that) we have Cisco environment with VSS working. 
 
client --------> AccessPoint------> Switch------->Vss Switch----->Fortigate------>DSL ----->Internet
 
now i dont understand where should i have to make new VLAN for guest in VSS Switch or in Fortigate.  Second is what should i do with fortigate how can i make rules and which things have to allow the traffic with this and how to configure fortigate. .
 
I know its a very basic and childish question but please if any one have time let me know . I will be very thank full. Attached is picture of the Topology and that is only my idea . if any one have another idea please comment below   🙂

[igor_tunakin]

Hi,
to place guest clients on Guest VLAN the AP must be configured to tag client traffic for the Guest SSID. 
The AP’s port on the switch must be configured such that Guest VLAN is available and tagged (trunk port).
The router (it seems to be your VSS Switch) must be configured such that the Interface VLAN with the same number.

So, the AP tags Guests packets, switch forwards them to the router and at last the router untags and routs packets to the internet or between anothe VLANs. 

Gruß von Dresden 🙂