Add profile support for FortiAP G-series models supporting WiFi 6E Tri-band and Dual 5 GHz modes 7.2.1

WTP profiles are supported for FortiAP G series access points (FAP-231G, FAP-233G, FAP-431G, FAP-433G). The G series models support Wi-Fi 6E IEEE 802.11ax Tri-band 2.4 GHz/5 GHz/6 GHz mode and dual 5 GHz mode.

To configure a FortiAP G series profile - GUI:

1. From the FortiGate GUI, navigate to WiFi & Switch Controller > FortiAP Profiles and click Create New.

2. In Platform, you can select a FortiAP G series model that supports WiFi 6E.

   

   Once you select a platform type, you can begin to configure the profile.

FortiAP G series models support three different radio configuration setups:

• Tri-band mode: Single 5G, with Dedicated scan disabled

  This is the default setup when creating a new FortiAP G series profile.

  In this setup, Radio 1 works on the 2.4GHz 802.11ax/n/g bands, Radio 2 works on the 5GHz 802.11ax/ac/n/a bands, and Radio 3 works on the Wi-Fi 6E 6GHz 802.11ax bands.

  

  

• Platform mode: Single 5G, with Dedicated scan enabled

  In the setup, Radio 1 works on the 2.4GHz 802.11ax/n/g bands, Radio 2 works on the 5GHz 802.11ax/ac/n/a bands, and Radio 3 works in monitor mode only.

  Note: When Dedicated scan is enabled, Radio 1 and Radio 2 will not spend any resources on scanning-related functions (for example, rogue AP detection, interfering SSID detection, and etc.). Radio 3 will be scanning all the time for all 2.4GHz, 5GHz, and 6GHz bands.

  

  

• Platform mode: Dual 5G

  In the setup, Radio 1 works on the 2.4GHz 802.11ax/n/g bands, Radio 2 works on the 5GHz 802.11ax/ac/n/a bands but is limited to lower 5GHz channels, and Radio 3 works on the 5GHz 802.11ax/ac/n/a bands but with higher 5GHz channels.

  Note: Dedicated scan is always disabled in Dual 5G mode.

  

  

To configure a FortiAP G series profile - CLI:

FortiAP G series models support three different radio configuration setups:

• Tri-band mode: Single 5G, Dedicated scan disabled

  config wireless-controller wtp-profile
    edit "FAP231G-setup1"
      config platform
        set type 231G
      end
      set handoff-sta-thresh 55
      config radio-1
        set band 802.11ax,n,g-only
        set channel "1" "6" "11"
      end
      config radio-2
        set band 802.11ax-5G
          set channel "36" "40" "44" "48" "149" "153" "157" "161" "165"
        end
        config radio-3
          set band 802.11ax-6G
          set channel "1" "5" "9" "13" "17" "21" "25" "29" "33" "37" "41" "45" "49" "53" "57" "61" "65" "69" "73" "77" "81" "85" "89" "93" "97" "101" "105" "109" "113" "117" "121" "125" "129" "133" "137" "141" "145" "149" "153" "157" "161" "165" "169" "173" "177" "181" "189" "193" "197" "201" "205" "209" "213" "217" "221" "225" "229" "233"
      end
    next
  end

  Note: The default value of platform mode is single-5G, and the default value of ddscan is disabled, so they are not shown in CLI.

  Note: For FortiAP G series models, 6GHz radio-3 as access point requires that VAPs must select one security mode from pure OWE, WPA3-SAE (sae-h2e-only must be enabled), WPA3-Enterprise, and WPA3-only-Enterprise.

• Platform mode: Single 5G, Dedicated scan enabled

  When ddscan is enabled, radio-3 works only in monitor mode.

  config wireless-controller wtp-profile
    edit "FAP231G-setup2"
      config platform
        set type 231G
        set ddscan enable
      end
      set handoff-sta-thresh 55
      config radio-1
        set band 802.11ax,n,g-only
        set channel "1" "6" "11"
      end
      config radio-2
        set band 802.11ax-5G
        set channel "36" "40" "44" "48" "149" "153" "157" "161" "165"
      end
      config radio-3
        set mode monitor
      end
    next
  end

• Platform mode: Dual 5G

  When platform mode is set to dual-5g, ddscan is always disabled and radio-3 6GHz operation becomes unavailable.

  config wireless-controller wtp-profile
    edit "FAP231G-setup3"
      config platform
        set type 231G
        set mode dual-5G
      end
      set handoff-sta-thresh 55
      config radio-1
        set band 802.11ax,n,g-only
        set channel "1" "6" "11"
      end
      config radio-2
        set band 802.11ax-5G
        set band-5g-type 5g-low
        set channel "36" "40" "44" "48"
      end
      config radio-3
        set band 802.11ax-5G
        set band-5g-type 5g-high
        set channel "149" "153" "157" "161" "165"
      end
    next
  end