config wireless-controller wtp
Configure Wireless Termination Points (WTPs), that is, FortiAPs or APs to be managed by FortiGate.
config wireless-controller wtp Description: Configure Wireless Termination Points (WTPs), that is, FortiAPs or APs to be managed by FortiGate. edit <wtp-id> set admin [discovered|disable|...] set allowaccess {option1}, {option2}, ... set apcfg-profile {string} set bonjour-profile {string} set coordinate-latitude {string} set coordinate-longitude {string} set firmware-provision {string} set image-download [enable|disable] set index {integer} set ip-fragment-preventing {option1}, {option2}, ... config lan Description: WTP LAN port mapping. set port-mode [offline|nat-to-wan|...] set port-ssid {string} set port1-mode [offline|nat-to-wan|...] set port1-ssid {string} set port2-mode [offline|nat-to-wan|...] set port2-ssid {string} set port3-mode [offline|nat-to-wan|...] set port3-ssid {string} set port4-mode [offline|nat-to-wan|...] set port4-ssid {string} set port5-mode [offline|nat-to-wan|...] set port5-ssid {string} set port6-mode [offline|nat-to-wan|...] set port6-ssid {string} set port7-mode [offline|nat-to-wan|...] set port7-ssid {string} set port8-mode [offline|nat-to-wan|...] set port8-ssid {string} set port-esl-mode [offline|nat-to-wan|...] set port-esl-ssid {string} end set led-state [enable|disable] set location {string} set login-passwd {password} set login-passwd-change [yes|default|...] set mesh-bridge-enable [default|enable|...] set name {string} set override-allowaccess [enable|disable] set override-ip-fragment [enable|disable] set override-lan [enable|disable] set override-led-state [enable|disable] set override-login-passwd-change [enable|disable] set override-split-tunnel [enable|disable] set override-wan-port-mode [enable|disable] config radio-1 Description: Configuration options for radio 1. set override-band [enable|disable] set band [802.11a|802.11b|...] set override-txpower [enable|disable] set auto-power-level [enable|disable] set auto-power-high {integer} set auto-power-low {integer} set auto-power-target {string} set power-level {integer} set override-vaps [enable|disable] set vap-all [tunnel|bridge|...] set vaps <name1>, <name2>, ... set override-channel [enable|disable] set channel <chan1>, <chan2>, ... set drma-manual-mode [ap|monitor|...] end config radio-2 Description: Configuration options for radio 2. set override-band [enable|disable] set band [802.11a|802.11b|...] set override-txpower [enable|disable] set auto-power-level [enable|disable] set auto-power-high {integer} set auto-power-low {integer} set auto-power-target {string} set power-level {integer} set override-vaps [enable|disable] set vap-all [tunnel|bridge|...] set vaps <name1>, <name2>, ... set override-channel [enable|disable] set channel <chan1>, <chan2>, ... set drma-manual-mode [ap|monitor|...] end config radio-3 Description: Configuration options for radio 3. set override-band [enable|disable] set band [802.11a|802.11b|...] set override-txpower [enable|disable] set auto-power-level [enable|disable] set auto-power-high {integer} set auto-power-low {integer} set auto-power-target {string} set power-level {integer} set override-vaps [enable|disable] set vap-all [tunnel|bridge|...] set vaps <name1>, <name2>, ... set override-channel [enable|disable] set channel <chan1>, <chan2>, ... set drma-manual-mode [ap|monitor|...] end config radio-4 Description: Configuration options for radio 4. set override-band [enable|disable] set band [802.11a|802.11b|...] set override-txpower [enable|disable] set auto-power-level [enable|disable] set auto-power-high {integer} set auto-power-low {integer} set auto-power-target {string} set power-level {integer} set override-vaps [enable|disable] set vap-all [tunnel|bridge|...] set vaps <name1>, <name2>, ... set override-channel [enable|disable] set channel <chan1>, <chan2>, ... set drma-manual-mode [ap|monitor|...] end set region {string} set region-x {string} set region-y {string} config split-tunneling-acl Description: Split tunneling ACL filter list. edit <id> set id {integer} set dest-ip {ipv4-classnet} next end set split-tunneling-acl-local-ap-subnet [enable|disable] set split-tunneling-acl-path [tunnel|local] set tun-mtu-downlink {integer} set tun-mtu-uplink {integer} set uuid {uuid} set wan-port-mode [wan-lan|wan-only] set wtp-id {string} set wtp-profile {string} next end
config wireless-controller wtp
Parameter |
Description |
Type |
Size |
Default |
||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|
admin |
Configure how the FortiGate operating as a wireless controller discovers and manages this WTP, AP or FortiAP. |
option |
- |
enable |
||||||||
|
|
|||||||||||
allowaccess |
Control management access to the managed WTP, FortiAP, or AP. Separate entries with a space. |
option |
- |
|
||||||||
|
|
|||||||||||
apcfg-profile |
AP local configuration profile name. |
string |
Not Specified |
|
||||||||
bonjour-profile |
Bonjour profile name. |
string |
Not Specified |
|
||||||||
coordinate-latitude |
WTP latitude coordinate. |
string |
Not Specified |
|
||||||||
coordinate-longitude |
WTP longitude coordinate. |
string |
Not Specified |
|
||||||||
firmware-provision |
Firmware version to provision to this FortiAP on bootup (major.minor.build, i.e. 6.2.1234). |
string |
Not Specified |
|
||||||||
image-download |
Enable/disable WTP image download. |
option |
- |
enable |
||||||||
|
|
|||||||||||
index |
Index. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
ip-fragment-preventing |
Method. |
option |
- |
tcp-mss-adjust |
||||||||
|
|
|||||||||||
led-state |
Enable to allow the FortiAPs LEDs to light. Disable to keep the LEDs off. You may want to keep the LEDs off so they are not distracting in low light areas etc. |
option |
- |
enable |
||||||||
|
|
|||||||||||
location |
Field for describing the physical location of the WTP, AP or FortiAP. |
string |
Not Specified |
|
||||||||
login-passwd |
Set the managed WTP, FortiAP, or AP's administrator password. |
password |
Not Specified |
|
||||||||
login-passwd-change |
Change or reset the administrator password of a managed WTP, FortiAP or AP. |
option |
- |
no |
||||||||
|
|
|||||||||||
mesh-bridge-enable |
Enable/disable mesh Ethernet bridge when WTP is configured as a mesh branch/leaf AP. |
option |
- |
default |
||||||||
|
|
|||||||||||
name |
WTP, AP or FortiAP configuration name. |
string |
Not Specified |
|
||||||||
override-allowaccess |
Enable to override the WTP profile management access configuration. |
option |
- |
disable |
||||||||
|
|
|||||||||||
override-ip-fragment |
Enable/disable overriding the WTP profile IP fragment prevention setting. |
option |
- |
disable |
||||||||
|
|
|||||||||||
override-lan |
Enable to override the WTP profile LAN port setting. |
option |
- |
disable |
||||||||
|
|
|||||||||||
override-led-state |
Enable to override the profile LED state setting for this FortiAP. You must enable this option to use the led-state command to turn off the FortiAP's LEDs. |
option |
- |
disable |
||||||||
|
|
|||||||||||
override-login-passwd-change |
Enable to override the WTP profile login-password (administrator password) setting. |
option |
- |
disable |
||||||||
|
|
|||||||||||
override-split-tunnel |
Enable/disable overriding the WTP profile split tunneling setting. |
option |
- |
disable |
||||||||
|
|
|||||||||||
override-wan-port-mode |
Enable/disable overriding the wan-port-mode in the WTP profile. |
option |
- |
disable |
||||||||
|
|
|||||||||||
region |
Region name WTP is associated with. |
string |
Not Specified |
|
||||||||
region-x |
Relative horizontal region coordinate (between 0 and 1). |
string |
Not Specified |
0 |
||||||||
region-y |
Relative vertical region coordinate (between 0 and 1). |
string |
Not Specified |
0 |
||||||||
split-tunneling-acl-local-ap-subnet |
Enable/disable automatically adding local subnetwork of FortiAP to split-tunneling ACL. |
option |
- |
disable |
||||||||
|
|
|||||||||||
split-tunneling-acl-path |
Split tunneling ACL path is local/tunnel. |
option |
- |
local |
||||||||
|
|
|||||||||||
tun-mtu-downlink |
The MTU of downlink CAPWAP tunnel. |
integer |
Minimum value: 576 Maximum value: 1500 |
0 |
||||||||
tun-mtu-uplink |
The maximum transmission unit. |
integer |
Minimum value: 576 Maximum value: 1500 |
0 |
||||||||
uuid |
Universally Unique Identifier (UUID; automatically assigned but can be manually reset). |
uuid |
Not Specified |
00000000-0000-0000-0000-000000000000 |
||||||||
wan-port-mode |
Enable/disable using the FortiAP WAN port as a LAN port. |
option |
- |
wan-only |
||||||||
|
|
|||||||||||
wtp-id |
WTP ID. |
string |
Not Specified |
|
||||||||
wtp-profile |
WTP profile name to apply to this WTP, AP or FortiAP. |
string |
Not Specified |
|
config lan
Parameter |
Description |
Type |
Size |
Default |
||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
port-mode |
LAN port mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port-ssid |
Bridge LAN port to SSID. |
string |
Not Specified |
|
||||||||||
port1-mode |
LAN port 1 mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port1-ssid |
Bridge LAN port 1 to SSID. |
string |
Not Specified |
|
||||||||||
port2-mode |
LAN port 2 mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port2-ssid |
Bridge LAN port 2 to SSID. |
string |
Not Specified |
|
||||||||||
port3-mode |
LAN port 3 mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port3-ssid |
Bridge LAN port 3 to SSID. |
string |
Not Specified |
|
||||||||||
port4-mode |
LAN port 4 mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port4-ssid |
Bridge LAN port 4 to SSID. |
string |
Not Specified |
|
||||||||||
port5-mode |
LAN port 5 mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port5-ssid |
Bridge LAN port 5 to SSID. |
string |
Not Specified |
|
||||||||||
port6-mode |
LAN port 6 mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port6-ssid |
Bridge LAN port 6 to SSID. |
string |
Not Specified |
|
||||||||||
port7-mode |
LAN port 7 mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port7-ssid |
Bridge LAN port 7 to SSID. |
string |
Not Specified |
|
||||||||||
port8-mode |
LAN port 8 mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port8-ssid |
Bridge LAN port 8 to SSID. |
string |
Not Specified |
|
||||||||||
port-esl-mode |
ESL port mode. |
option |
- |
offline |
||||||||||
|
|
|||||||||||||
port-esl-ssid |
Bridge ESL port to SSID. |
string |
Not Specified |
|
config radio-1
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
override-band |
Enable to override the WTP profile band setting. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
band |
WiFi band that Radio 1 operates on. |
option |
- |
|
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
override-txpower |
Enable to override the WTP profile power level configuration. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
auto-power-level |
Enable/disable automatic power-level adjustment to prevent co-channel interference. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
auto-power-high |
The upper bound of automatic transmit power adjustment in dBm (the actual range of transmit power depends on the AP platform type). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
17 |
||||||||||||||||||||||||||||||||||||||||||||
auto-power-low |
The lower bound of automatic transmit power adjustment in dBm (the actual range of transmit power depends on the AP platform type). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
10 |
||||||||||||||||||||||||||||||||||||||||||||
auto-power-target |
The target of automatic transmit power adjustment in dBm.. |
string |
Not Specified |
-70 |
||||||||||||||||||||||||||||||||||||||||||||
power-level |
Radio power level as a percentage of the maximum transmit power. |
integer |
Minimum value: 0 Maximum value: 100 |
100 |
||||||||||||||||||||||||||||||||||||||||||||
override-vaps |
Enable to override WTP profile Virtual Access Point (VAP) settings. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
vap-all |
Configure method for assigning SSIDs to this FortiAP. |
option |
- |
tunnel |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
vaps |
Manually selected list of Virtual Access Points (VAPs). Virtual Access Point (VAP) name. |
string |
Maximum length: 35 |
|
||||||||||||||||||||||||||||||||||||||||||||
override-channel |
Enable to override WTP profile channel settings. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
channel |
Selected list of wireless radio channels. Channel number. |
string |
Maximum length: 3 |
|
||||||||||||||||||||||||||||||||||||||||||||
drma-manual-mode |
Radio mode to be used for DRMA manual mode. |
option |
- |
ncf |
||||||||||||||||||||||||||||||||||||||||||||
|
|
config radio-2
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
override-band |
Enable to override the WTP profile band setting. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
band |
WiFi band that Radio 2 operates on. |
option |
- |
|
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
override-txpower |
Enable to override the WTP profile power level configuration. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
auto-power-level |
Enable/disable automatic power-level adjustment to prevent co-channel interference. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
auto-power-high |
The upper bound of automatic transmit power adjustment in dBm (the actual range of transmit power depends on the AP platform type). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
17 |
||||||||||||||||||||||||||||||||||||||||||||
auto-power-low |
The lower bound of automatic transmit power adjustment in dBm (the actual range of transmit power depends on the AP platform type). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
10 |
||||||||||||||||||||||||||||||||||||||||||||
auto-power-target |
The target of automatic transmit power adjustment in dBm.. |
string |
Not Specified |
-70 |
||||||||||||||||||||||||||||||||||||||||||||
power-level |
Radio power level as a percentage of the maximum transmit power. |
integer |
Minimum value: 0 Maximum value: 100 |
100 |
||||||||||||||||||||||||||||||||||||||||||||
override-vaps |
Enable to override WTP profile Virtual Access Point (VAP) settings. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
vap-all |
Configure method for assigning SSIDs to this FortiAP. |
option |
- |
tunnel |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
vaps |
Manually selected list of Virtual Access Points (VAPs). Virtual Access Point (VAP) name. |
string |
Maximum length: 35 |
|
||||||||||||||||||||||||||||||||||||||||||||
override-channel |
Enable to override WTP profile channel settings. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
channel |
Selected list of wireless radio channels. Channel number. |
string |
Maximum length: 3 |
|
||||||||||||||||||||||||||||||||||||||||||||
drma-manual-mode |
Radio mode to be used for DRMA manual mode. |
option |
- |
ncf |
||||||||||||||||||||||||||||||||||||||||||||
|
|
config radio-3
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
override-band |
Enable to override the WTP profile band setting. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
band |
WiFi band that Radio 3 operates on. |
option |
- |
|
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
override-txpower |
Enable to override the WTP profile power level configuration. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
auto-power-level |
Enable/disable automatic power-level adjustment to prevent co-channel interference. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
auto-power-high |
The upper bound of automatic transmit power adjustment in dBm (the actual range of transmit power depends on the AP platform type). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
17 |
||||||||||||||||||||||||||||||||||||||||||||
auto-power-low |
The lower bound of automatic transmit power adjustment in dBm (the actual range of transmit power depends on the AP platform type). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
10 |
||||||||||||||||||||||||||||||||||||||||||||
auto-power-target |
The target of automatic transmit power adjustment in dBm.. |
string |
Not Specified |
-70 |
||||||||||||||||||||||||||||||||||||||||||||
power-level |
Radio power level as a percentage of the maximum transmit power. |
integer |
Minimum value: 0 Maximum value: 100 |
100 |
||||||||||||||||||||||||||||||||||||||||||||
override-vaps |
Enable to override WTP profile Virtual Access Point (VAP) settings. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
vap-all |
Configure method for assigning SSIDs to this FortiAP. |
option |
- |
tunnel |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
vaps |
Manually selected list of Virtual Access Points (VAPs). Virtual Access Point (VAP) name. |
string |
Maximum length: 35 |
|
||||||||||||||||||||||||||||||||||||||||||||
override-channel |
Enable to override WTP profile channel settings. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
channel |
Selected list of wireless radio channels. Channel number. |
string |
Maximum length: 3 |
|
||||||||||||||||||||||||||||||||||||||||||||
drma-manual-mode |
Radio mode to be used for DRMA manual mode. |
option |
- |
ncf |
||||||||||||||||||||||||||||||||||||||||||||
|
|
config radio-4
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
override-band |
Enable to override the WTP profile band setting. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
band |
WiFi band that Radio 4 operates on. |
option |
- |
|
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
override-txpower |
Enable to override the WTP profile power level configuration. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
auto-power-level |
Enable/disable automatic power-level adjustment to prevent co-channel interference. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
auto-power-high |
The upper bound of automatic transmit power adjustment in dBm (the actual range of transmit power depends on the AP platform type). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
17 |
||||||||||||||||||||||||||||||||||||||||||||
auto-power-low |
The lower bound of automatic transmit power adjustment in dBm (the actual range of transmit power depends on the AP platform type). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
10 |
||||||||||||||||||||||||||||||||||||||||||||
auto-power-target |
The target of automatic transmit power adjustment in dBm.. |
string |
Not Specified |
-70 |
||||||||||||||||||||||||||||||||||||||||||||
power-level |
Radio power level as a percentage of the maximum transmit power. |
integer |
Minimum value: 0 Maximum value: 100 |
100 |
||||||||||||||||||||||||||||||||||||||||||||
override-vaps |
Enable to override WTP profile Virtual Access Point (VAP) settings. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
vap-all |
Configure method for assigning SSIDs to this FortiAP. |
option |
- |
tunnel |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
vaps |
Manually selected list of Virtual Access Points (VAPs). Virtual Access Point (VAP) name. |
string |
Maximum length: 35 |
|
||||||||||||||||||||||||||||||||||||||||||||
override-channel |
Enable to override WTP profile channel settings. |
option |
- |
disable |
||||||||||||||||||||||||||||||||||||||||||||
|
|
|||||||||||||||||||||||||||||||||||||||||||||||
channel |
Selected list of wireless radio channels. Channel number. |
string |
Maximum length: 3 |
|
||||||||||||||||||||||||||||||||||||||||||||
drma-manual-mode |
Radio mode to be used for DRMA manual mode. |
option |
- |
ncf |
||||||||||||||||||||||||||||||||||||||||||||
|
|
config split-tunneling-acl
Parameter |
Description |
Type |
Size |
Default |
---|---|---|---|---|
id |
ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
dest-ip |
Destination IP and mask for the split-tunneling subnet. |
ipv4-classnet |
Not Specified |
0.0.0.0 0.0.0.0 |