Fortinet white logo
Fortinet white logo

New features or enhancements

New features or enhancements

The following table includes new features and enhancements in FortiAP-U version 6.2.3 when managed by a FortiGate running FortiOS version 6.2.4 and later, or by FortiLAN Cloud:

For FortiAP-U features managed by a FortiWLC, see the Wireless Controller documentation.

Bug ID

Description

599911

802.11ax FortiAP-U models support customizing high-efficiency (HE) MCS data rates in VAP configuration.

Note: FortiGate needs to run FortiOS version 7.0.2 and later.

615311

Support for band steering (frequency handoff) on local-standalone SSID operating on both 2.4GHz and 5GHz radios of the same FortiAP device.

638845

802.11ax FortiAP-U models support automatic BSS Coloring.

Note: FortiGate needs to run FortiOS version 7.0.2 and later.

640771

Support for Wireless Layer-3 Firewall.

644209

Support for Automatic Radio Resource Provisioning (ARRP) Enhancement.

701338

FortiAP admin password supports up to 128 characters for local LOGIN_PASSWD variable and wtp/wtp-profile login-passwd configured from the WiFi Controller.

731733

Support for dynamic VLAN ID assignment according to RADIUS attribute "Tunnel-Private-Group-Id" when it is a text string and matches one interface name of sub-VLAN interfaces of VAP.

739305

After being authenticated on a bridge-mode external captive-portal SSID, clients can log out via an HTTP or HTTPS URL:

  • http://[FAP IP]:5000/logout
  • https://[FAP IP]:5001/logout

The REST API to log out a client by MAC address:

  • URL: https://[FAP IP]/cp-logout
  • Method: POST
  • Data: macaddr=[client MAC address]

739309

Support for "hitless" failover in FortiGate HA cluster (active-passive mode only).

739312

802.11ax FortiAP-U models report operating temperature (degree Celsius) to FortiGate WiFi Controller.

739313

Local-standalone NAT-mode SSID can configure optional DNS servers to assign out to wireless clients through DHCP.

741444

FortiAP can advertise its name, model, and/or serial number in the vendor specific element of beacon frames.

Note: FortiGate needs to run FortiOS version 7.0.2 and later.

742002

FortiAP admin password requires a minimum of 5 characters and no longer allows a blank password.

744218

FortiAP can send log messages to a Syslog server.

Note: FortiGate needs to run FortiOS version 7.0.2 and later.

747782

Support for querying FortiGuard service to determine IoT device details.

Region/country code update and DFS certification

Bug ID

Description

667008

Enable DFS channels on FAP-U231F with region code J.

Note: FortiGate needs to run FortiOS 7.0.2 and later.

704749

Enable DFS channels on FAP-U234F with region code E, I, V, Y and D.

Note: FortiGate needs to run FortiOS 7.0.2 and later.

Changes in CLI

Bug ID

Description

762565

The variable "FAP_UTM_FEATURE" is removed from the "cfg" command.

Tooltip

802.11ax FortiAP-U models can now dynamically enable or disable UTM feature according to the UTM configuration in bridge-mode SSIDs assigned from WiFi Controller.

New features or enhancements

New features or enhancements

The following table includes new features and enhancements in FortiAP-U version 6.2.3 when managed by a FortiGate running FortiOS version 6.2.4 and later, or by FortiLAN Cloud:

For FortiAP-U features managed by a FortiWLC, see the Wireless Controller documentation.

Bug ID

Description

599911

802.11ax FortiAP-U models support customizing high-efficiency (HE) MCS data rates in VAP configuration.

Note: FortiGate needs to run FortiOS version 7.0.2 and later.

615311

Support for band steering (frequency handoff) on local-standalone SSID operating on both 2.4GHz and 5GHz radios of the same FortiAP device.

638845

802.11ax FortiAP-U models support automatic BSS Coloring.

Note: FortiGate needs to run FortiOS version 7.0.2 and later.

640771

Support for Wireless Layer-3 Firewall.

644209

Support for Automatic Radio Resource Provisioning (ARRP) Enhancement.

701338

FortiAP admin password supports up to 128 characters for local LOGIN_PASSWD variable and wtp/wtp-profile login-passwd configured from the WiFi Controller.

731733

Support for dynamic VLAN ID assignment according to RADIUS attribute "Tunnel-Private-Group-Id" when it is a text string and matches one interface name of sub-VLAN interfaces of VAP.

739305

After being authenticated on a bridge-mode external captive-portal SSID, clients can log out via an HTTP or HTTPS URL:

  • http://[FAP IP]:5000/logout
  • https://[FAP IP]:5001/logout

The REST API to log out a client by MAC address:

  • URL: https://[FAP IP]/cp-logout
  • Method: POST
  • Data: macaddr=[client MAC address]

739309

Support for "hitless" failover in FortiGate HA cluster (active-passive mode only).

739312

802.11ax FortiAP-U models report operating temperature (degree Celsius) to FortiGate WiFi Controller.

739313

Local-standalone NAT-mode SSID can configure optional DNS servers to assign out to wireless clients through DHCP.

741444

FortiAP can advertise its name, model, and/or serial number in the vendor specific element of beacon frames.

Note: FortiGate needs to run FortiOS version 7.0.2 and later.

742002

FortiAP admin password requires a minimum of 5 characters and no longer allows a blank password.

744218

FortiAP can send log messages to a Syslog server.

Note: FortiGate needs to run FortiOS version 7.0.2 and later.

747782

Support for querying FortiGuard service to determine IoT device details.

Region/country code update and DFS certification

Bug ID

Description

667008

Enable DFS channels on FAP-U231F with region code J.

Note: FortiGate needs to run FortiOS 7.0.2 and later.

704749

Enable DFS channels on FAP-U234F with region code E, I, V, Y and D.

Note: FortiGate needs to run FortiOS 7.0.2 and later.

Changes in CLI

Bug ID

Description

762565

The variable "FAP_UTM_FEATURE" is removed from the "cfg" command.

Tooltip

802.11ax FortiAP-U models can now dynamically enable or disable UTM feature according to the UTM configuration in bridge-mode SSIDs assigned from WiFi Controller.