Configuring FortiAPs to connect to FortiGate

Once you finish configuring your FortiGate, you can begin to configure your FortiAPs for deployment.

There are two ways to configure and deploy your FortiAPs:

• Deploying with FortiAP Cloud
• Deploying without FortiAP Cloud

Deploying with FortiAP Cloud

1. Log in to your FortiAP Cloud account with your FortiCloud credentials at:

   https://www.fortiapcloud.com

2. In top top-right of the page, click Inventory.

   

   The Inventory page loads.

3. Select how you want to import FortiAPs to the Cloud.

   

   • Import AP Key: Import individual FortiAPs by entering their FortiCloud Key
   • Import Bulk Key: Enter a Bulk key that you've obtained from Fortinet Support, or from purchasing FortiDeploy.
4. Once you've added your devices to FortiAP Cloud, select the FortiAP(s) you want to deploy and click Deploy.
5. In the Deploy to AP Network pop up, select Deploy to External AC.

6. Enter the Public Facing WAN IP Address (or FQDN that points to the WAN IP Address) of the External AC (FortiGate), then click Deploy.

   FortiAP Cloud configures the WTP Profile on the FAP to statically point to the public facing WAN address of the FortiGate.

Deploying without FortiAP Cloud

To configure and deploy your FortiAP

1. Plug the FortiAP you want to deploy into a port or VLAN that has DHCP configured.

   • If no DHCP server is available, the default IP information to log in to the AP is:

     IP Address: 192.168.1.2

     Subnet Mask: 255.255.255.0

     DGW: 192.168.1.1

2. Look for the assigned IP Address on the router or DHCP server.

   If no DHCP server is available, use a cross-over cable to connect your Ethernet port directly to the LAN port on the AP.

   Note: You might need a power adapter for the FortiAP if POE is not available.

3. From a web browser, access your FortiAP at https://<FAP-IP> where <FAP-IP> is the IP address of the FortiAP.

4. Log in with username admin and no password.

5. From the FortiAP page, click Local Configuration.

6. In the AC Discovery Type field, select how you want the FortiAP to discover the controller and complete any required fields:

   This guide only covers the options relevant to setting up a remote AP. For comprehensive information, refer to Advanced WiFi controller discovery.

   • Auto: Automatically cycle through all six of the discovery methods until it establishes an AC connection.
   • Static: Provide up to three Static IP Addresses (most likely the public facing IP addresses for remote workers).
   • DHCP: Use DHCP Option 138.
   • DNS: Provide up to three FQDN entries that are resolvable by the FortiAP.
   • FortiAP Cloud: Enter your FortiAP Cloud username and password.
7. In the AP Data Channel Security field, select IPsec Enabled.
8. Click OK to save your changes.

Applying configurations to multiple FortiAPs

If you have multiple FortiAPs that you need to configure, you can save a backup configuration file and use the restore function to apply these configurations to other FortiAPs. In order for this method to work, the firmware version of all your FortiAPs must match.

To apply configurations to multiple FortiAPs

1. From your FortiAP page, in the top right corner, click to expand the admin menu.

   

2. Click Backup Configuration to save a configuration file.
3. Log in to the FortiAP page that you want to apply to configuration to.
4. Click to expand the admin menu.
5. Click Restore Configuration and select the configuration file you created.