Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • FortiWiFi and FortiAP Configuration Guide

    Home FortiAP / FortiWiFi 7.4.5 FortiWiFi and FortiAP Configuration Guide
    7.4.5
    7.6.0
    7.4.5
    7.4.4
    7.4.2
    7.4.1
    7.4.0
    7.2.5
    7.2.4
    7.2.1
    7.2.0
    7.0.4
    7.0.2
    7.0.1
    7.0.0
    6.4.6
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.2
    6.2.0
    6.0.5
    6.0.4
    6.0.3
    5.6.4
    5.4.3

    Operations Profiles Entry

    Operations Profiles Entry

    When you enable Advanced Wireless Features, FortiAP Profiles is renamed to Operation Profiles and contains additional tabs that enable you to manage QoS and FortiAP Configuration profiles.

    FortiAP Profiles

    When you create or edit a FortiAP profile, you can apply a FortiAP Configuration Profile (see FortiAP Configuration Profiles) and configure additional advanced settings:

    These fields correspond to the following CLI settings under config wireless-controller wtp-profile:

    DTLS Policy

    Select which DTLS policy you want to apply to the profile. See WiFi data channel encryption.

    		 
    set dtls-policy {option1}, {option2}, …

    Maximum client count

    Limit the number of clients. See Limiting the number of clients.

    		 
    set max-clients {integer}

    Handoff RSSI

    Set the minimum handoff RSSI threshold for when FortiAP applies load balancing to a client. See Setting the handoff RSSI threshold.

    		 
    set handoff-rssi {integer}

    Handoff threshold

    Set the number of clients at which AP load balancing begins. See Setting the AP load balance threshold.

    		 
    set handoff-sta-thresh {integer}

    LED usage

    Enable or disable LEDs.

    When you enable LED usage, you can also assign recurring firewall schedules for illuminating the LEDs. See LED options.

    		 
    set led-state [enable|disable]

    set led-schedules <name1>, <name2>, ...

    QoS Profiles

    In the QoS Profiles tab, you can create or edit Quality of Service (QoS) profiles.

    Click Create new to create a QoS profile.

    These fields correspond to the following CLI settings under config wireless-controller qos-profile:

    Name Enter a name for the profile. 
    edit <name>
    Comment Optionally, enter comments. 
      set comment {string}
    Maximum uplink bandwidth for SSIDs The maximum uplink speed (VAPs), in Kbps. 
      set uplink {integer}
    Maximum downlink bandwidth for SSIDs The maximum downlink speed (VAPs), in Kbps. 
      set downlink {integer}
    Maximum uplink bandwidth for clients The maximum uplink speed (Clients), in Kbps. 
      set uplink-sta {integer}
    Maximum downlink bandwidth for clients The maximum downlink speed (Clients), in Kbps. 
      set downlink-sta {integer}
    Client rate burst Enable/disable client rate burst. 
      set burst [enable|disable]
    WMM Control Enable/disable WiFi Multimedia (WMM) control. 
      set wmm [enable|disable]
    U-APSD power save mode

    Enable/disable WMM Unscheduled Automatic Power Save Delivery (U-APSD) power save mode.

    This option is only available if WMM Control is enabled.

    		 
      set wmm-uapsd [enable|disable]
    Call admission control

    Enable/disable WMM call admission control.

    This option is only available if WMM Control is enabled.

    		 
      set call-admission-control [enable|disable]
    Maximum VoWLAN phones count

    Maximum number of Voice over WLAN.

    Shown when Call admission control is enabled.

    		 
      set call-capacity {integer}
    Bandwidth admission control

    Enable/disable WMM bandwidth admission control.

    This option is only available if Call admission control is enabled.

    		 
      set bandwidth-admission-control [enable|disable]
    Maximum bandwidth capacity (Kbps)

    Maximum bandwidth capacity allowed.

    Shown when Bandwidth admission control is enabled

    		 
      set bandwidth-capacity {integer}
    DSCP mapping Enable/disable differentiated Services Code Point (DSCP) mapping. 
      set dscp-wmm-mapping [enable|disable]
    Voice access

    DSCP mapping for voice access.

    Shown when DSCP mapping is enabled.

    		 
      set dscp-wmm-vo <id1>, <id2>, …
    Video access

    DSCP mapping for video access

    Shown when DSCP mapping is enabled.

    		 
      set dscp-wmm-vi <id1>, <id2>, …
    Best effort access

    DSCP mapping for best effort access.

    Shown when DSCP mapping is enabled.

    		 
      set dscp-wmm-be <id1>, <id2>, …
    Background access

    DSCP mapping for background access

    Shown when DSCP mapping is enabled.

    		 
      set dscp-wmm-bk <id1>, <id2>, …
    DSCP marking Enable/disable differentiated Services Code Point (DSCP) marking.. 
      set wmm-dscp-marking [enable|disable]
    Voice access

    DSCP marking for voice access.

    Shown when DSCP marking is enabled.

    		 
      set wmm-vo-dscp {integer}
    Video access

    DSCP marking for video access.

    Shown when DSCP marking is enabled.

    		 
      set wmm-vi-dscp {integer}
    Best effort access

    DSCP marking for best effort access.

    Shown when DSCP marking is enabled.

    		 
      set wmm-be-dscp {integer}
    Background access

    DSCP marking for background access.

    Shown when DSCP marking is enabled.

    		 
      set wmm-bk-dscp {integer}

    FortiAP Configuration Profiles

    In the FortiAP Configuration Profiles tab, you can create or edit FortiAP Configuration Profiles for managing local FortiAP configurations.

    Click Create new to create a FortiAP Configuration profile. You can select which FortiAP family you want to apply local configurations to.

    In Command list, you can create a list of commands you want to apply to a local FortiAP. Enter the name of the command you want to apply and the value you want to take effect. These fields correspond to the following CLI settings under config wireless-controller apcfg-profile:

    Name

    		 Enter a name for the profile. 
    edit <name>

    Comment

    		 Optionally, enter comments. 
      set comment {var-string}

    FortiAP family

    		 FortiAP family type. 
      set ap-family [fap|fap-u|...]

    Command list > New / Edit Command

    Configure FortiAP local configuration commands.

    For the command names and possible values, see FortiAP CLI configuration and diagnostics commands

    		 
      config command-list

    ID

    		 Enter a command ID. 
        edit <id>

    Name

    		 Enter the name of the FortiAP local configuration command name. For example, AC_DISCOVERY_TYPE. 
        set name {string}

    Type

    Select the command type.

    		 
        set type [non-password|password]

    Value/Password

    Set the AP local configuration command value or password depending on the command Type you selected. For example, if you entered AC_DISCOVERY_TYPE, enter 6 for Multicast.

    		 
        set value {string} / set passwd-value {password}

    Waiting time

    		 Maximum waiting time in minutes for the AP to join the wireless controller after applying AP local configuration. 
      set ac-timer {integer}

    Type

    Validation controller type:

    • Default: This controller is the one and only controller that the AP could join after applying AP local configuration.
    • Specify: Specified controller is the one and only controller that the AP could join after applying AP local configuration.
    • Defined by FortiAP Configuration: Any controller defined by AP local configuration after applying AP local configuration.
    		 
      set ac-type [default|specify|...]

    IP

    IP address of the validation controller that AP must be able to join after applying AP local configuration.

    Shown when Type is set to Specify.

    		 
      set ac-ip {ipv4-address}

    Port

    Port of the validation controller that AP must be able to join after applying AP local configuration.

    Shown when Type is set to Specify.

    		 
      set ac-port {integer}
    Previous
    Next

    Operations Profiles Entry

    Operations Profiles Entry

    When you enable Advanced Wireless Features, FortiAP Profiles is renamed to Operation Profiles and contains additional tabs that enable you to manage QoS and FortiAP Configuration profiles.

    FortiAP Profiles

    When you create or edit a FortiAP profile, you can apply a FortiAP Configuration Profile (see FortiAP Configuration Profiles) and configure additional advanced settings:

    These fields correspond to the following CLI settings under config wireless-controller wtp-profile:

    DTLS Policy

    Select which DTLS policy you want to apply to the profile. See WiFi data channel encryption.

    		 
    set dtls-policy {option1}, {option2}, …

    Maximum client count

    Limit the number of clients. See Limiting the number of clients.

    		 
    set max-clients {integer}

    Handoff RSSI

    Set the minimum handoff RSSI threshold for when FortiAP applies load balancing to a client. See Setting the handoff RSSI threshold.

    		 
    set handoff-rssi {integer}

    Handoff threshold

    Set the number of clients at which AP load balancing begins. See Setting the AP load balance threshold.

    		 
    set handoff-sta-thresh {integer}

    LED usage

    Enable or disable LEDs.

    When you enable LED usage, you can also assign recurring firewall schedules for illuminating the LEDs. See LED options.

    		 
    set led-state [enable|disable]

    set led-schedules <name1>, <name2>, ...

    QoS Profiles

    In the QoS Profiles tab, you can create or edit Quality of Service (QoS) profiles.

    Click Create new to create a QoS profile.

    These fields correspond to the following CLI settings under config wireless-controller qos-profile:

    Name Enter a name for the profile. 
    edit <name>
    Comment Optionally, enter comments. 
      set comment {string}
    Maximum uplink bandwidth for SSIDs The maximum uplink speed (VAPs), in Kbps. 
      set uplink {integer}
    Maximum downlink bandwidth for SSIDs The maximum downlink speed (VAPs), in Kbps. 
      set downlink {integer}
    Maximum uplink bandwidth for clients The maximum uplink speed (Clients), in Kbps. 
      set uplink-sta {integer}
    Maximum downlink bandwidth for clients The maximum downlink speed (Clients), in Kbps. 
      set downlink-sta {integer}
    Client rate burst Enable/disable client rate burst. 
      set burst [enable|disable]
    WMM Control Enable/disable WiFi Multimedia (WMM) control. 
      set wmm [enable|disable]
    U-APSD power save mode

    Enable/disable WMM Unscheduled Automatic Power Save Delivery (U-APSD) power save mode.

    This option is only available if WMM Control is enabled.

    		 
      set wmm-uapsd [enable|disable]
    Call admission control

    Enable/disable WMM call admission control.

    This option is only available if WMM Control is enabled.

    		 
      set call-admission-control [enable|disable]
    Maximum VoWLAN phones count

    Maximum number of Voice over WLAN.

    Shown when Call admission control is enabled.

    		 
      set call-capacity {integer}
    Bandwidth admission control

    Enable/disable WMM bandwidth admission control.

    This option is only available if Call admission control is enabled.

    		 
      set bandwidth-admission-control [enable|disable]
    Maximum bandwidth capacity (Kbps)

    Maximum bandwidth capacity allowed.

    Shown when Bandwidth admission control is enabled

    		 
      set bandwidth-capacity {integer}
    DSCP mapping Enable/disable differentiated Services Code Point (DSCP) mapping. 
      set dscp-wmm-mapping [enable|disable]
    Voice access

    DSCP mapping for voice access.

    Shown when DSCP mapping is enabled.

    		 
      set dscp-wmm-vo <id1>, <id2>, …
    Video access

    DSCP mapping for video access

    Shown when DSCP mapping is enabled.

    		 
      set dscp-wmm-vi <id1>, <id2>, …
    Best effort access

    DSCP mapping for best effort access.

    Shown when DSCP mapping is enabled.

    		 
      set dscp-wmm-be <id1>, <id2>, …
    Background access

    DSCP mapping for background access

    Shown when DSCP mapping is enabled.

    		 
      set dscp-wmm-bk <id1>, <id2>, …
    DSCP marking Enable/disable differentiated Services Code Point (DSCP) marking.. 
      set wmm-dscp-marking [enable|disable]
    Voice access

    DSCP marking for voice access.

    Shown when DSCP marking is enabled.

    		 
      set wmm-vo-dscp {integer}
    Video access

    DSCP marking for video access.

    Shown when DSCP marking is enabled.

    		 
      set wmm-vi-dscp {integer}
    Best effort access

    DSCP marking for best effort access.

    Shown when DSCP marking is enabled.

    		 
      set wmm-be-dscp {integer}
    Background access

    DSCP marking for background access.

    Shown when DSCP marking is enabled.

    		 
      set wmm-bk-dscp {integer}

    FortiAP Configuration Profiles

    In the FortiAP Configuration Profiles tab, you can create or edit FortiAP Configuration Profiles for managing local FortiAP configurations.

    Click Create new to create a FortiAP Configuration profile. You can select which FortiAP family you want to apply local configurations to.

    In Command list, you can create a list of commands you want to apply to a local FortiAP. Enter the name of the command you want to apply and the value you want to take effect. These fields correspond to the following CLI settings under config wireless-controller apcfg-profile:

    Name

    		 Enter a name for the profile. 
    edit <name>

    Comment

    		 Optionally, enter comments. 
      set comment {var-string}

    FortiAP family

    		 FortiAP family type. 
      set ap-family [fap|fap-u|...]

    Command list > New / Edit Command

    Configure FortiAP local configuration commands.

    For the command names and possible values, see FortiAP CLI configuration and diagnostics commands

    		 
      config command-list

    ID

    		 Enter a command ID. 
        edit <id>

    Name

    		 Enter the name of the FortiAP local configuration command name. For example, AC_DISCOVERY_TYPE. 
        set name {string}

    Type

    Select the command type.

    		 
        set type [non-password|password]

    Value/Password

    Set the AP local configuration command value or password depending on the command Type you selected. For example, if you entered AC_DISCOVERY_TYPE, enter 6 for Multicast.

    		 
        set value {string} / set passwd-value {password}

    Waiting time

    		 Maximum waiting time in minutes for the AP to join the wireless controller after applying AP local configuration. 
      set ac-timer {integer}

    Type

    Validation controller type:

    • Default: This controller is the one and only controller that the AP could join after applying AP local configuration.
    • Specify: Specified controller is the one and only controller that the AP could join after applying AP local configuration.
    • Defined by FortiAP Configuration: Any controller defined by AP local configuration after applying AP local configuration.
    		 
      set ac-type [default|specify|...]

    IP

    IP address of the validation controller that AP must be able to join after applying AP local configuration.

    Shown when Type is set to Specify.

    		 
      set ac-ip {ipv4-address}

    Port

    Port of the validation controller that AP must be able to join after applying AP local configuration.

    Shown when Type is set to Specify.

    		 
      set ac-port {integer}
    Previous
    Next