Fortinet black logo

FortiWiFi and FortiAP Configuration Guide

FortiAP groups

Copy Link
Copy Doc ID 87eec643-a25f-11ed-8e6d-fa163e15d75b:174136
Download PDF

FortiAP groups

FortiAP groups facilitate the management of a large numbers of FortiAPs. For example, you can group APs based on the floor or section of the office they are installed on. Each AP can belong to one group only. Grouping an AP enables you to assign VLANs to all the APs in that group, simplifying the administrative workload. This feature is useful in large deployments as you can break down the broadcast domain, rather than putting all wireless clients into a single subnet. You can also apply security inspections and firewall rules based on the location of the wireless clients, providing you with more granular control over wireless traffic.

Through the VLAN pool feature, a FortiAP group can be associated with a VLAN to which WiFi clients will be assigned. For more details about VLAN pool assignment, see VLAN assignment by FortiAP group.

Once you create a FortiAP group and add FortiAPs to it, you can filter your Managed FortiAPs view by group and easily identify which AP belongs to which areas.

To create a FortiAP group - GUI
  1. Go to WiFi & and Switch Controller > Managed FortiAPs and select Create New > Managed AP Group.
  2. Give the group a Name.
  3. Choose Members.
  4. Click OK.
To create a FortiAP group - CLI

In this example, wtp-group-1 is created for a FortiAP-221C and one member device is added.

config wireless-controller wtp-group

edit wtp-group-1

set platform-type 221C

config wtp-list

edit FP221C3X14019926

end

end

FortiAP groups

FortiAP groups facilitate the management of a large numbers of FortiAPs. For example, you can group APs based on the floor or section of the office they are installed on. Each AP can belong to one group only. Grouping an AP enables you to assign VLANs to all the APs in that group, simplifying the administrative workload. This feature is useful in large deployments as you can break down the broadcast domain, rather than putting all wireless clients into a single subnet. You can also apply security inspections and firewall rules based on the location of the wireless clients, providing you with more granular control over wireless traffic.

Through the VLAN pool feature, a FortiAP group can be associated with a VLAN to which WiFi clients will be assigned. For more details about VLAN pool assignment, see VLAN assignment by FortiAP group.

Once you create a FortiAP group and add FortiAPs to it, you can filter your Managed FortiAPs view by group and easily identify which AP belongs to which areas.

To create a FortiAP group - GUI
  1. Go to WiFi & and Switch Controller > Managed FortiAPs and select Create New > Managed AP Group.
  2. Give the group a Name.
  3. Choose Members.
  4. Click OK.
To create a FortiAP group - CLI

In this example, wtp-group-1 is created for a FortiAP-221C and one member device is added.

config wireless-controller wtp-group

edit wtp-group-1

set platform-type 221C

config wtp-list

edit FP221C3X14019926

end

end