config wireless-controller wtp-profile

Configure WTP profiles or FortiAP profiles that define radio settings for manageable FortiAP platforms.

config wireless-controller wtp-profile

Description: Configure WTP profiles or FortiAP profiles that define radio settings for manageable FortiAP platforms.

edit <name>

set comment {var-string}

config platform

Description: WTP, FortiAP, or AP platform.

set type [AP-11N|220B|...]

set mode [single-5G|dual-5G]

set ddscan [enable|disable]

end

set control-message-offload {option1}, {option2}, ...

set apcfg-profile {string}

set ble-profile {string}

set wan-port-mode [wan-lan|wan-only]

config lan

Description: WTP LAN port mapping.

set port-mode [offline|nat-to-wan|...]

set port-ssid {string}

set port1-mode [offline|nat-to-wan|...]

set port1-ssid {string}

set port2-mode [offline|nat-to-wan|...]

set port2-ssid {string}

set port3-mode [offline|nat-to-wan|...]

set port3-ssid {string}

set port4-mode [offline|nat-to-wan|...]

set port4-ssid {string}

set port5-mode [offline|nat-to-wan|...]

set port5-ssid {string}

set port6-mode [offline|nat-to-wan|...]

set port6-ssid {string}

set port7-mode [offline|nat-to-wan|...]

set port7-ssid {string}

set port8-mode [offline|nat-to-wan|...]

set port8-ssid {string}

set port-esl-mode [offline|nat-to-wan|...]

set port-esl-ssid {string}

end

set energy-efficient-ethernet [enable|disable]

set led-state [enable|disable]

set led-schedules <name1>, <name2>, ...

set dtls-policy {option1}, {option2}, ...

set dtls-in-kernel [enable|disable]

set max-clients {integer}

set handoff-rssi {integer}

set handoff-sta-thresh {integer}

set handoff-roaming [enable|disable]

config deny-mac-list

Description: List of MAC addresses that are denied access to this WTP, FortiAP, or AP.

edit <id>

set mac {mac-address}

next

end

set ap-country [NA|AF|...]

set ip-fragment-preventing {option1}, {option2}, ...

set tun-mtu-uplink {integer}

set tun-mtu-downlink {integer}

set split-tunneling-acl-path [tunnel|local]

set split-tunneling-acl-local-ap-subnet [enable|disable]

config split-tunneling-acl

Description: Split tunneling ACL filter list.

edit <id>

set dest-ip {ipv4-classnet}

next

end

set allowaccess {option1}, {option2}, ...

set login-passwd-change [yes|default|...]

set login-passwd {password}

set lldp [enable|disable]

set poe-mode [auto|8023af|...]

set frequency-handoff [enable|disable]

set ap-handoff [enable|disable]

config radio-1

Description: Configuration options for radio 1.

set mode [disabled|ap|...]

set band [802.11a|802.11b|...]

set band-5g-type [5g-full|5g-high|...]

set drma [disable|enable]

set drma-sensitivity [low|medium|...]

set airtime-fairness [enable|disable]

set protection-mode [rtscts|ctsonly|...]

set powersave-optimize {option1}, {option2}, ...

set transmit-optimize {option1}, {option2}, ...

set amsdu [enable|disable]

set coexistence [enable|disable]

set zero-wait-dfs [enable|disable]

set bss-color {integer}

set short-guard-interval [enable|disable]

set channel-bonding [160MHz|80MHz|...]

set auto-power-level [enable|disable]

set auto-power-high {integer}

set auto-power-low {integer}

set auto-power-target {string}

set power-level {integer}

set dtim {integer}

set beacon-interval {integer}

set rts-threshold {integer}

set frag-threshold {integer}

set ap-sniffer-bufsize {integer}

set ap-sniffer-chan {integer}

set ap-sniffer-addr {mac-address}

set ap-sniffer-mgmt-beacon [enable|disable]

set ap-sniffer-mgmt-probe [enable|disable]

set ap-sniffer-mgmt-other [enable|disable]

set ap-sniffer-ctl [enable|disable]

set ap-sniffer-data [enable|disable]

set channel-utilization [enable|disable]

set wids-profile {string}

set darrp [enable|disable]

set max-clients {integer}

set max-distance {integer}

set vap-all [tunnel|bridge|...]

set vaps <name1>, <name2>, ...

set channel <chan1>, <chan2>, ...

set call-admission-control [enable|disable]

set call-capacity {integer}

set bandwidth-admission-control [enable|disable]

set bandwidth-capacity {integer}

end

config radio-2

Description: Configuration options for radio 2.

set mode [disabled|ap|...]

set band [802.11a|802.11b|...]

set band-5g-type [5g-full|5g-high|...]

set drma [disable|enable]

set drma-sensitivity [low|medium|...]

set airtime-fairness [enable|disable]

set protection-mode [rtscts|ctsonly|...]

set powersave-optimize {option1}, {option2}, ...

set transmit-optimize {option1}, {option2}, ...

set amsdu [enable|disable]

set coexistence [enable|disable]

set zero-wait-dfs [enable|disable]

set bss-color {integer}

set short-guard-interval [enable|disable]

set channel-bonding [160MHz|80MHz|...]

set auto-power-level [enable|disable]

set auto-power-high {integer}

set auto-power-low {integer}

set auto-power-target {string}

set power-level {integer}

set dtim {integer}

set beacon-interval {integer}

set rts-threshold {integer}

set frag-threshold {integer}

set ap-sniffer-bufsize {integer}

set ap-sniffer-chan {integer}

set ap-sniffer-addr {mac-address}

set ap-sniffer-mgmt-beacon [enable|disable]

set ap-sniffer-mgmt-probe [enable|disable]

set ap-sniffer-mgmt-other [enable|disable]

set ap-sniffer-ctl [enable|disable]

set ap-sniffer-data [enable|disable]

set channel-utilization [enable|disable]

set wids-profile {string}

set darrp [enable|disable]

set max-clients {integer}

set max-distance {integer}

set vap-all [tunnel|bridge|...]

set vaps <name1>, <name2>, ...

set channel <chan1>, <chan2>, ...

set call-admission-control [enable|disable]

set call-capacity {integer}

set bandwidth-admission-control [enable|disable]

set bandwidth-capacity {integer}

end

config radio-3

Description: Configuration options for radio 3.

set mode [disabled|ap|...]

set band [802.11a|802.11b|...]

set band-5g-type [5g-full|5g-high|...]

set drma [disable|enable]

set drma-sensitivity [low|medium|...]

set airtime-fairness [enable|disable]

set protection-mode [rtscts|ctsonly|...]

set powersave-optimize {option1}, {option2}, ...

set transmit-optimize {option1}, {option2}, ...

set amsdu [enable|disable]

set coexistence [enable|disable]

set zero-wait-dfs [enable|disable]

set bss-color {integer}

set short-guard-interval [enable|disable]

set channel-bonding [160MHz|80MHz|...]

set auto-power-level [enable|disable]

set auto-power-high {integer}

set auto-power-low {integer}

set auto-power-target {string}

set power-level {integer}

set dtim {integer}

set beacon-interval {integer}

set rts-threshold {integer}

set frag-threshold {integer}

set ap-sniffer-bufsize {integer}

set ap-sniffer-chan {integer}

set ap-sniffer-addr {mac-address}

set ap-sniffer-mgmt-beacon [enable|disable]

set ap-sniffer-mgmt-probe [enable|disable]

set ap-sniffer-mgmt-other [enable|disable]

set ap-sniffer-ctl [enable|disable]

set ap-sniffer-data [enable|disable]

set channel-utilization [enable|disable]

set wids-profile {string}

set darrp [enable|disable]

set max-clients {integer}

set max-distance {integer}

set vap-all [tunnel|bridge|...]

set vaps <name1>, <name2>, ...

set channel <chan1>, <chan2>, ...

set call-admission-control [enable|disable]

set call-capacity {integer}

set bandwidth-admission-control [enable|disable]

set bandwidth-capacity {integer}

end

config radio-4

Description: Configuration options for radio 4.

set mode [disabled|ap|...]

set band [802.11a|802.11b|...]

set band-5g-type [5g-full|5g-high|...]

set drma [disable|enable]

set drma-sensitivity [low|medium|...]

set airtime-fairness [enable|disable]

set protection-mode [rtscts|ctsonly|...]

set powersave-optimize {option1}, {option2}, ...

set transmit-optimize {option1}, {option2}, ...

set amsdu [enable|disable]

set coexistence [enable|disable]

set zero-wait-dfs [enable|disable]

set bss-color {integer}

set short-guard-interval [enable|disable]

set channel-bonding [160MHz|80MHz|...]

set auto-power-level [enable|disable]

set auto-power-high {integer}

set auto-power-low {integer}

set auto-power-target {string}

set power-level {integer}

set dtim {integer}

set beacon-interval {integer}

set rts-threshold {integer}

set frag-threshold {integer}

set ap-sniffer-bufsize {integer}

set ap-sniffer-chan {integer}

set ap-sniffer-addr {mac-address}

set ap-sniffer-mgmt-beacon [enable|disable]

set ap-sniffer-mgmt-probe [enable|disable]

set ap-sniffer-mgmt-other [enable|disable]

set ap-sniffer-ctl [enable|disable]

set ap-sniffer-data [enable|disable]

set channel-utilization [enable|disable]

set wids-profile {string}

set darrp [enable|disable]

set max-clients {integer}

set max-distance {integer}

set vap-all [tunnel|bridge|...]

set vaps <name1>, <name2>, ...

set channel <chan1>, <chan2>, ...

set call-admission-control [enable|disable]

set call-capacity {integer}

set bandwidth-admission-control [enable|disable]

set bandwidth-capacity {integer}

end

config lbs

Description: Set various location based service (LBS) options.

set ekahau-blink-mode [enable|disable]

set ekahau-tag {mac-address}

set erc-server-ip {ipv4-address-any}

set erc-server-port {integer}

set aeroscout [enable|disable]

set aeroscout-server-ip {ipv4-address-any}

set aeroscout-server-port {integer}

set aeroscout-mu [enable|disable]

set aeroscout-ap-mac [bssid|board-mac]

set aeroscout-mmu-report [enable|disable]

set aeroscout-mu-factor {integer}

set aeroscout-mu-timeout {integer}

set fortipresence [foreign|both|...]

set fortipresence-server {ipv4-address-any}

set fortipresence-port {integer}

set fortipresence-secret {password}

set fortipresence-project {string}

set fortipresence-frequency {integer}

set fortipresence-rogue [enable|disable]

set fortipresence-unassoc [enable|disable]

set fortipresence-ble [enable|disable]

set station-locate [enable|disable]

end

set ext-info-enable [enable|disable]

next

end

config wireless-controller wtp-profile

Parameter

Description

Type

Size

Default

comment

Comment.

var-string

Not Specified

control-message-offload

Enable/disable CAPWAP control message data channel offload.

option

-

ebp-frame aeroscout-tag ap-list sta-list sta-cap-list stats aeroscout-mu sta-health spectral-analysis

 

Option

Description

ebp-frame

Ekahau blink protocol (EBP) frames.

aeroscout-tag

AeroScout tag.

ap-list

Rogue AP list.

sta-list

Rogue STA list.

sta-cap-list

STA capability list.

stats

WTP, radio, VAP, and STA statistics.

aeroscout-mu

AeroScout Mobile Unit (MU) report.

sta-health

STA health log.

spectral-analysis

Spectral analysis report.

apcfg-profile

AP local configuration profile name.

string

Not Specified

ble-profile

Bluetooth Low Energy profile name.

string

Not Specified

wan-port-mode

Enable/disable using a WAN port as a LAN port.

option

-

wan-only

 

Option

Description

wan-lan

Enable using a WAN port as a LAN port.

wan-only

Disable using a WAN port as a LAN port.

energy-efficient-ethernet

Enable/disable use of energy efficient Ethernet on WTP.

option

-

disable

 

Option

Description

enable

Enable use of energy efficient Ethernet on WTP.

disable

Disable use of energy efficient Ethernet on WTP.

led-state

Enable/disable use of LEDs on WTP .

option

-

enable

 

Option

Description

enable

Enable use of LEDs on WTP.

disable

Disable use of LEDs on WTP.

led-schedules <name>

Recurring firewall schedules for illuminating LEDs on the FortiAP. If led-state is enabled, LEDs will be visible when at least one of the schedules is valid. Separate multiple schedule names with a space.

Schedule name.

string

Maximum length: 35

dtls-policy

WTP data channel DTLS policy .

option

-

clear-text

 

Option

Description

clear-text

Clear Text Data Channel.

dtls-enabled

DTLS Enabled Data Channel.

ipsec-vpn

IPsec VPN Data Channel.

dtls-in-kernel

Enable/disable data channel DTLS in kernel.

option

-

disable

 

Option

Description

enable

Enable data channel DTLS in kernel.

disable

Disable data channel DTLS in kernel.

max-clients

Maximum number of stations .

integer

Minimum value: 0 Maximum value: 4294967295

0

handoff-rssi

Minimum received signal strength indicator .

integer

Minimum value: 20 Maximum value: 30

25

handoff-sta-thresh

Threshold value for AP handoff.

integer

Minimum value: 0 Maximum value: 4294967295

0

handoff-roaming

Enable/disable client load balancing during roaming to avoid roaming delay .

option

-

enable

 

Option

Description

enable

Enable handoff roaming.

disable

Disable handoff roaming.

ap-country

Country in which this WTP, FortiAP or AP will operate .

option

-

NA

 

Option

Description

NA

NO_COUNTRY_SET

AF

AFGHANISTAN

AL

ALBANIA

DZ

ALGERIA

AS

AMERICAN SAMOA

AO

ANGOLA

AR

ARGENTINA

AM

ARMENIA

AU

AUSTRALIA

AT

AUSTRIA

AZ

AZERBAIJAN

BS

BAHAMAS

BH

BAHRAIN

BD

BANGLADESH

BB

BARBADOS

BY

BELARUS

BE

BELGIUM

BZ

BELIZE

BJ

BENIN

BM

BERMUDA

BT

BHUTAN

BO

BOLIVIA

BA

BOSNIA AND HERZEGOVINA

BW

BOTSWANA

BR

BRAZIL

BN

BRUNEI DARUSSALAM

BG

BULGARIA

BF

BURKINA-FASO

KH

CAMBODIA

CM

CAMEROON

KY

CAYMAN ISLANDS

CF

CENTRAL AFRICA REPUBLIC

TD

CHAD

CL

CHILE

CN

CHINA

CX

CHRISTMAS ISLAND

CO

COLOMBIA

CG

CONGO REPUBLIC

CD

DEMOCRATIC REPUBLIC OF CONGO

CR

COSTA RICA

HR

CROATIA

CY

CYPRUS

CZ

CZECH REPUBLIC

DK

DENMARK

DM

DOMINICA

DO

DOMINICAN REPUBLIC

EC

ECUADOR

EG

EGYPT

SV

EL SALVADOR

ET

ETHIOPIA

EE

ESTONIA

GF

FRENCH GUIANA

PF

FRENCH POLYNESIA

FO

FAEROE ISLANDS

FJ

FIJI

FI

FINLAND

FR

FRANCE

GE

GEORGIA

DE

GERMANY

GH

GHANA

GI

GIBRALTAR

GR

GREECE

GL

GREENLAND

GD

GRENADA

GP

GUADELOUPE

GU

GUAM

GT

GUATEMALA

GY

GUYANA

HT

HAITI

HN

HONDURAS

HK

HONG KONG

HU

HUNGARY

IS

ICELAND

IN

INDIA

ID

INDONESIA

IQ

IRAQ

IE

IRELAND

IM

ISLE OF MAN

IL

ISRAEL

IT

ITALY

CI

COTE_D_IVOIRE

JM

JAMAICA

JO

JORDAN

KZ

KAZAKHSTAN

KE

KENYA

KR

KOREA REPUBLIC

KW

KUWAIT

LA

LAOS

LV

LATVIA

LB

LEBANON

LS

LESOTHO

LY

LIBYA

LI

LIECHTENSTEIN

LT

LITHUANIA

LU

LUXEMBOURG

MO

MACAU SAR

MK

MACEDONIA, FYRO

MG

MADAGASCAR

MW

MALAWI

MY

MALAYSIA

MV

MALDIVES

ML

MALI

MT

MALTA

MH

MARSHALL ISLANDS

MQ

MARTINIQUE

MR

MAURITANIA

MU

MAURITIUS

YT

MAYOTTE

MX

MEXICO

FM

MICRONESIA

MD

REPUBLIC OF MOLDOVA

MC

MONACO

MA

MOROCCO

MZ

MOZAMBIQUE

MM

MYANMAR

NP

NEPAL

NL

NETHERLANDS

AN

NETHERLANDS ANTILLES

AW

ARUBA

NZ

NEW ZEALAND

NI

NICARAGUA

NE

NIGER

NO

NORWAY

MP

NORTHERN MARIANA ISLANDS

OM

OMAN

PK

PAKISTAN

PW

PALAU

PA

PANAMA

PG

PAPUA NEW GUINEA

PY

PARAGUAY

PE

PERU

PH

PHILIPPINES

PL

POLAND

PT

PORTUGAL

PR

PUERTO RICO

QA

QATAR

RE

REUNION

RO

ROMANIA

RU

RUSSIA

RW

RWANDA

BL

SAINT BARTHELEMY

KN

SAINT KITTS AND NEVIS

LC

SAINT LUCIA

MF

SAINT MARTIN

PM

SAINT PIERRE AND MIQUELON

VC

SAINT VINCENT AND GRENADIENS

SA

SAUDI ARABIA

SN

SENEGAL

RS

REPUBLIC OF SERBIA

ME

MONTENEGRO

SL

SIERRA LEONE

SG

SINGAPORE

SK

SLOVAKIA

SI

SLOVENIA

ZA

SOUTH AFRICA

ES

SPAIN

LK

SRI LANKA

SE

SWEDEN

SR

SURINAME

CH

SWITZERLAND

TW

TAIWAN

TZ

TANZANIA

TH

THAILAND

TG

TOGO

TT

TRINIDAD AND TOBAGO

TN

TUNISIA

TR

TURKEY

TM

TURKMENISTAN

AE

UNITED ARAB EMIRATES

TC

TURKS AND CAICOS

UG

UGANDA

UA

UKRAINE

GB

UNITED KINGDOM

US

UNITED STATES2

PS

UNITED STATES (PUBLIC SAFETY)

UY

URUGUAY

UZ

UZBEKISTAN

VU

VANUATU

VE

VENEZUELA

VN

VIET NAM

VI

VIRGIN ISLANDS

WF

WALLIS AND FUTUNA

YE

YEMEN

ZM

ZAMBIA

ZW

ZIMBABWE

JP

JAPAN14

CA

CANADA2

ip-fragment-preventing

Method.

option

-

tcp-mss-adjust

 

Option

Description

tcp-mss-adjust

TCP maximum segment size adjustment.

icmp-unreachable

Drop packet and send ICMP Destination Unreachable

tun-mtu-uplink

The maximum transmission unit .

integer

Minimum value: 576 Maximum value: 1500

0

tun-mtu-downlink

The MTU of downlink CAPWAP tunnel .

integer

Minimum value: 576 Maximum value: 1500

0

split-tunneling-acl-path

Split tunneling ACL path is local/tunnel.

option

-

local

 

Option

Description

tunnel

Split tunneling ACL list traffic will be tunnel.