Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

config wireless-controller global

Configure wireless controller global settings.

config wireless-controller global

Description: Configure wireless controller global settings.

set name {string}

set location {string}

set image-download [enable|disable]

set max-retransmit {integer}

set control-message-offload {option1}, {option2}, ...

set data-ethernet-II [enable|disable]

set link-aggregation [enable|disable]

set mesh-eth-type {integer}

set fiapp-eth-type {integer}

set discovery-mc-addr {ipv4-address-multicast}

set max-clients {integer}

set rogue-scan-mac-adjacency {integer}

set ipsec-base-ip {ipv4-address}

set wtp-share [enable|disable]

set ap-log-server [enable|disable]

set ap-log-server-ip {ipv4-address}

set ap-log-server-port {integer}

end

config wireless-controller global

Parameter name

Description

Type

Size

name

Name of the wireless controller.

string

Maximum length: 35

location

Description of the location of the wireless controller.

string

Maximum length: 35

image-download

Enable/disable WTP image download at join time.

option

-

 

Option

Description

enable

Enable WTP image download at join time.

disable

Disable WTP image download at join time.

max-retransmit

Maximum number of tunnel packet retransmissions (0 - 64, default = 3).

integer

Minimum value: 0 Maximum value: 64

control-message-offload

Configure CAPWAP control message data channel offload.

option

-

 

Option

Description

ebp-frame

Ekahau blink protocol (EBP) frames.

aeroscout-tag

AeroScout tag.

ap-list

Rogue AP list.

sta-list

Rogue STA list.

sta-cap-list

STA capability list.

stats

WTP, radio, VAP, and STA statistics.

aeroscout-mu

AeroScout Mobile Unit (MU) report.

sta-health

STA health log.

data-ethernet-II

Configure the wireless controller to use Ethernet II or 802.3 frames with 802.3 data tunnel mode (default = enable).

option

-

 

Option

Description

enable

Use Ethernet II frames with 802.3 data tunnel mode.

disable

Use 802.3 Ethernet frames with 802.3 data tunnel mode.

link-aggregation

Enable/disable calculating the CAPWAP transmit hash to load balance sessions to link aggregation nodes (default = disable).

option

-

 

Option

Description

enable

Enable calculating the CAPWAP transmit hash.

disable

Disable calculating the CAPWAP transmit hash.

mesh-eth-type

Mesh Ethernet identifier included in backhaul packets (0 - 65535, default = 8755).

integer

Minimum value: 8755 Maximum value: 8755

fiapp-eth-type

Ethernet type for Fortinet Inter-Access Point Protocol (IAPP), or IEEE 802.11f, packets (0 - 65535, default = 5252).

integer

Minimum value: 5252 Maximum value: 5252

discovery-mc-addr

Multicast IP address for AP discovery (default = 244.0.1.140).

ipv4-address-multicast

Not Specified

max-clients

Maximum number of clients that can connect simultaneously (default = 0, meaning no limitation).

integer

Minimum value: 0 Maximum value: 4294967295

rogue-scan-mac-adjacency

Maximum numerical difference between an AP's Ethernet and wireless MAC values to match for rogue detection (0 - 31, default = 7).

integer

Minimum value: 0 Maximum value: 31

ipsec-base-ip

Base IP address for IPsec VPN tunnels between the access points and the wireless controller (default = 169.254.0.1).

ipv4-address

Not Specified

wtp-share

Enable/disable sharing of WTPs between VDOMs.

option

-

 

Option

Description

enable

WTP can be shared between all VDOMs.

disable

WTP can be used only in its own VDOM.

ap-log-server

Enable/disable configuring APs or FortiAPs to send log messages to a syslog server (default = disable).

option

-

 

Option

Description

enable

Enable AP log server.

disable

Disable AP log server.

ap-log-server-ip

IP address that APs or FortiAPs send log messages to.

ipv4-address

Not Specified

ap-log-server-port

Port that APs or FortiAPs send log messages to.

integer

Minimum value: 0 Maximum value: 65535

config wireless-controller global

Configure wireless controller global settings.

config wireless-controller global

Description: Configure wireless controller global settings.

set name {string}

set location {string}

set image-download [enable|disable]

set max-retransmit {integer}

set control-message-offload {option1}, {option2}, ...

set data-ethernet-II [enable|disable]

set link-aggregation [enable|disable]

set mesh-eth-type {integer}

set fiapp-eth-type {integer}

set discovery-mc-addr {ipv4-address-multicast}

set max-clients {integer}

set rogue-scan-mac-adjacency {integer}

set ipsec-base-ip {ipv4-address}

set wtp-share [enable|disable]

set ap-log-server [enable|disable]

set ap-log-server-ip {ipv4-address}

set ap-log-server-port {integer}

end

config wireless-controller global

Parameter name

Description

Type

Size

name

Name of the wireless controller.

string

Maximum length: 35

location

Description of the location of the wireless controller.

string

Maximum length: 35

image-download

Enable/disable WTP image download at join time.

option

-

 

Option

Description

enable

Enable WTP image download at join time.

disable

Disable WTP image download at join time.

max-retransmit

Maximum number of tunnel packet retransmissions (0 - 64, default = 3).

integer

Minimum value: 0 Maximum value: 64

control-message-offload

Configure CAPWAP control message data channel offload.

option

-

 

Option

Description

ebp-frame

Ekahau blink protocol (EBP) frames.

aeroscout-tag

AeroScout tag.

ap-list

Rogue AP list.

sta-list

Rogue STA list.

sta-cap-list

STA capability list.

stats

WTP, radio, VAP, and STA statistics.

aeroscout-mu

AeroScout Mobile Unit (MU) report.

sta-health

STA health log.

data-ethernet-II

Configure the wireless controller to use Ethernet II or 802.3 frames with 802.3 data tunnel mode (default = enable).

option

-

 

Option

Description

enable

Use Ethernet II frames with 802.3 data tunnel mode.

disable

Use 802.3 Ethernet frames with 802.3 data tunnel mode.

link-aggregation

Enable/disable calculating the CAPWAP transmit hash to load balance sessions to link aggregation nodes (default = disable).

option

-

 

Option

Description

enable

Enable calculating the CAPWAP transmit hash.

disable

Disable calculating the CAPWAP transmit hash.

mesh-eth-type

Mesh Ethernet identifier included in backhaul packets (0 - 65535, default = 8755).

integer

Minimum value: 8755 Maximum value: 8755

fiapp-eth-type

Ethernet type for Fortinet Inter-Access Point Protocol (IAPP), or IEEE 802.11f, packets (0 - 65535, default = 5252).

integer

Minimum value: 5252 Maximum value: 5252

discovery-mc-addr

Multicast IP address for AP discovery (default = 244.0.1.140).

ipv4-address-multicast

Not Specified

max-clients

Maximum number of clients that can connect simultaneously (default = 0, meaning no limitation).

integer

Minimum value: 0 Maximum value: 4294967295

rogue-scan-mac-adjacency

Maximum numerical difference between an AP's Ethernet and wireless MAC values to match for rogue detection (0 - 31, default = 7).

integer

Minimum value: 0 Maximum value: 31

ipsec-base-ip

Base IP address for IPsec VPN tunnels between the access points and the wireless controller (default = 169.254.0.1).

ipv4-address

Not Specified

wtp-share

Enable/disable sharing of WTPs between VDOMs.

option

-

 

Option

Description

enable

WTP can be shared between all VDOMs.

disable

WTP can be used only in its own VDOM.

ap-log-server

Enable/disable configuring APs or FortiAPs to send log messages to a syslog server (default = disable).

option

-

 

Option

Description

enable

Enable AP log server.

disable

Disable AP log server.

ap-log-server-ip

IP address that APs or FortiAPs send log messages to.

ipv4-address

Not Specified

ap-log-server-port

Port that APs or FortiAPs send log messages to.

integer

Minimum value: 0 Maximum value: 65535