Document
Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Table of Contents

What's new in this release
Introduction
Getting started with FortiAP management
- Configuring the FortiGate interface to manage FortiAP units
- Discovering, authorizing, and deauthorizing FortiAP units
- FortiAP diagnostics and tools
- Setting up a mesh connection between FortiAP units
- Data channel security: clear-text, DTLS, and IPsec VPN
Wireless network configuration
- Wireless network configuration tasks
- Setting your geographic location
- Configuring the network interface for the AP unit
- Creating a FortiAP profile
- Defining a wireless network interface (SSID)
  - Changing SSID to VDOM only
- Configuring security
- Defining SSID groups
- Configuring dynamic user VLAN assignment
- Configuring wireless NAC support
- Configuring user authentication
- Configuring firewall policies for the SSID
- Configuring the built-in access point on a FortiWiFi unit
- Enforcing UTM policies on a local bridge SSID
- Configuring a Syslog profile
- Configuring Distributed Radio Resource Provisioning
- Translating WiFi QoS WMM marking to DSCP values
- Configuring Layer 3 roaming
  - Configuring L3 Roaming for Tunnel Mode SSIDs
  - Configuring L3 Roaming for Bridge Mode SSIDs
- Advanced Wireless Features
Access point configuration
- Network topology of managed APs
- Discovery and authorization of APs
- Register a FortiAP to FortiCloud
- FortiAP CLI access
- FortiAP Configuration mode
- FortiAP unit firmware upgrade
- Advanced WiFi controller discovery
- Wireless client load balancing for high-density deployments
- FortiAP groups
- LAN port options
- LAN port aggregation and redundancy
  - LAN port uplink redundancy without LACP
- CAPWAP
- LED options
Wireless mesh configuration
- Configuring a meshed WiFi network
- Configuring a point-to-point bridge
Hotspot 2.0 configuration
WiFi network with wired LAN configuration
- How to configure a FortiAP local bridge (private cloud-managed AP)
- How to increase the number of supported FortiAPs
Remote WLAN FortiAPs
Features for high-density deployments
Wireless network protection
- Wireless Intrusion Detection System
- WiFi data channel encryption
- Protected Management Frames and Opportunistic Key Caching support
- Bluetooth Low Energy scan
- Preventing local bridge traffic from reaching the LAN
- FortiAP-S and FortiAP-U bridge mode security profiles
- DHCP snooping and option-82 data insertion
- DHCP address enforcement
- Disabling console port access
- Configuring 802.1X supplicant on LAN
- Suppressing phishing SSID
Wireless network monitoring
- Monitoring wireless health and clients
- Monitoring rogue APs
- Suppressing rogue APs
- Monitoring wireless clients
- Monitoring wireless clients over IPv6 traffic
- Monitoring application usage for clients connected to bridge mode SSIDs
- Monitoring FortiAP with SNMP
- Monitoring FortiAP temperatures
- Enabling spectrum analysis
- Disable dedicated scanning on FortiAP F-Series profiles
Wireless network examples
- Basic wireless network example
- Wireless network example with FortiSwitch
- Complex wireless network example
- FortiGate WiFi controller 1+1 fast failover example
- CAPWAP hitless failover using FGCP
FortiWiFi unit as a wireless client
- FortiWiFi unit in client mode
- Configuring a FortiWiFi unit as a wireless client
WiFi maps
Support for location-based services
- Configuring location tracking
- Viewing device location data on a FortiGate unit
- Configuring FortiPresence
Support for Electronic Shelf Label systems
Troubleshooting
- FortiAP shell command
- Signal strength issues
- Throughput issues
- Client connection issues
- FortiAP connection issues
- Testing wireless network health with SAM
- Determining the coverage area of a FortiAP
- Best practices for OSI common sources of wireless issues
- Extended logging
- Packet sniffer
- Debug commands
- Disabling 802.11d for client backward compatibility
FortiAP CLI configuration and diagnostics commands
FortiAP API
Change log

FortiWiFi and FortiAP Configuration Guide

7.2.1

Download PDF

Copy Doc ID c67ff8dd-1365-11ed-9eba-fa163e15d75b:140779

Copy Link

Change log

Date	Change description
2022-08-05	Initial release. See What's new in this release.
2022-09-26	Updated Monitoring FortiAP with SNMP.
2022-10-28	Added Configuring the network interface for the AP unit Updated Wireless network configuration tasks
2022-11-17	Updated What's new in this release.
2022-12-07	Updated Configuring a FortiWiFi unit as a wireless client.
2022-12-14	Added CAPWAP hitless failover using FGCP.
2023-02-06	UpdatedConfiguring user authentication, Configuring WPA2-Enterprise SSID, and Basic wireless network example
2023-02-16	Updated WPA3 Security
2023-02-22	Updated Translating WiFi QoS WMM marking to DSCP values
2023-06-20	Updated Remote WLAN FortiAPs
2023-08-09	Updated LAN port aggregation and redundancy and LAN port uplink redundancy without LACP.

Previous

Next

Change log

Date	Change description
2022-08-05	Initial release. See What's new in this release.
2022-09-26	Updated Monitoring FortiAP with SNMP.
2022-10-28	Added Configuring the network interface for the AP unit Updated Wireless network configuration tasks
2022-11-17	Updated What's new in this release.
2022-12-07	Updated Configuring a FortiWiFi unit as a wireless client.
2022-12-14	Added CAPWAP hitless failover using FGCP.
2023-02-06	UpdatedConfiguring user authentication, Configuring WPA2-Enterprise SSID, and Basic wireless network example
2023-02-16	Updated WPA3 Security
2023-02-22	Updated Translating WiFi QoS WMM marking to DSCP values
2023-06-20	Updated Remote WLAN FortiAPs
2023-08-09	Updated LAN port aggregation and redundancy and LAN port uplink redundancy without LACP.

Previous

Next