Before a tunnel mode SSID can be used on a FortiGate wireless controller, which task must be completed?

Before a tunnel mode SSID can be used on a FortiGate wireless controller, which task must be completed?
A . Assign a Layer 3 address to the wireless network interface
B . Manually assign the network to a FortiAP profile
C . Enable HTTPS on the wireless network interface
D . Configure a wireless network to Internet firewall policy

Answer: A