Version:

Version:


Table of Contents

New Features

Download PDF
Copy Link

Add profile support for FortiAP G-series models supporting WiFi 6E Tri-band and Dual 5 GHz modes 7.2.1

WTP profiles are supported for FortiAP G series access points (FAP-231G, FAP-233G, FAP-431G, FAP-433G). The G series models support Wi-Fi 6E IEEE 802.11ax Tri-band 2.4 GHz/5 GHz/6 GHz mode and dual 5 GHz mode.

To configure a FortiAP G series profile - GUI:
  1. From the FortiGate GUI, navigate to WiFi & Switch Controller > FortiAP Profiles and click Create New.
  2. In Platform, you can select a FortiAP G series model that supports WiFi 6E.

    Once you select a platform type, you can begin to configure the profile.

FortiAP G series models support three different radio configuration setups:

  • Tri-band mode: Single 5G, with Dedicated scan disabled

    This is the default setup when creating a new FortiAP G series profile.

    In this setup, Radio 1 works on the 2.4GHz 802.11ax/n/g bands, Radio 2 works on the 5GHz 802.11ax/ac/n/a bands, and Radio 3 works on the Wi-Fi 6E 6GHz 802.11ax bands.

  • Platform mode: Single 5G, with Dedicated scan enabled

    In the setup, Radio 1 works on the 2.4GHz 802.11ax/n/g bands, Radio 2 works on the 5GHz 802.11ax/ac/n/a bands, and Radio 3 works in monitor mode only.

    Note: When Dedicated scan is enabled, Radio 1 and Radio 2 will not spend any resources on scanning-related functions (for example, rogue AP detection, interfering SSID detection, and etc.). Radio 3 will be scanning all the time for all 2.4GHz, 5GHz, and 6GHz bands.

  • Platform mode: Dual 5G

    In the setup, Radio 1 works on the 2.4GHz 802.11ax/n/g bands, Radio 2 works on the 5GHz 802.11ax/ac/n/a bands but is limited to lower 5GHz channels, and Radio 3 works on the 5GHz 802.11ax/ac/n/a bands but with higher 5GHz channels.

    Note: Dedicated scan is always disabled in Dual 5G mode.

To configure a FortiAP G series profile - CLI:

FortiAP G series models support three different radio configuration setups:

  • Tri-band mode: Single 5G, Dedicated scan disabled

    config wireless-controller wtp-profile
      edit "FAP231G-setup1"
        config platform
          set type 231G
        end
        set handoff-sta-thresh 55
        config radio-1
          set band 802.11ax,n,g-only
          set channel "1" "6" "11"
        end
        config radio-2
          set band 802.11ax-5G
            set channel "36" "40" "44" "48" "149" "153" "157" "161" "165"
          end
          config radio-3
            set band 802.11ax-6G
            set channel "1" "5" "9" "13" "17" "21" "25" "29" "33" "37" "41" "45" "49" "53" "57" "61" "65" "69" "73" "77" "81" "85" "89" "93" "97" "101" "105" "109" "113" "117" "121" "125" "129" "133" "137" "141" "145" "149" "153" "157" "161" "165" "169" "173" "177" "181" "189" "193" "197" "201" "205" "209" "213" "217" "221" "225" "229" "233"
        end
      next
    end

    Note: The default value of platform mode is single-5G, and the default value of ddscan is disabled, so they are not shown in CLI.

    Note: For FortiAP G series models,  6GHz radio-3 as access point requires that VAPs must select one security mode from pure OWE, WPA3-SAE (sae-h2e-only must be enabled), WPA3-Enterprise, and WPA3-only-Enterprise.

  • Platform mode: Single 5G, Dedicated scan enabled

    When ddscan is enabled, radio-3 works only in monitor mode.

    config wireless-controller wtp-profile
      edit "FAP231G-setup2"
        config platform
          set type 231G
          set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
          set band 802.11ax,n,g-only
          set channel "1" "6" "11"
        end
        config radio-2
          set band 802.11ax-5G
          set channel "36" "40" "44" "48" "149" "153" "157" "161" "165"
        end
        config radio-3
          set mode monitor
        end
      next
    end
  • Platform mode: Dual 5G

    When platform mode is set to dual-5g, ddscan is always disabled and radio-3 6GHz operation becomes unavailable.

    config wireless-controller wtp-profile
      edit "FAP231G-setup3"
        config platform
          set type 231G
          set mode dual-5G
        end
        set handoff-sta-thresh 55
        config radio-1
          set band 802.11ax,n,g-only
          set channel "1" "6" "11"
        end
        config radio-2
          set band 802.11ax-5G
          set band-5g-type 5g-low
          set channel "36" "40" "44" "48"
        end
        config radio-3
          set band 802.11ax-5G
          set band-5g-type 5g-high
          set channel "149" "153" "157" "161" "165"
        end
      next
    end

Add profile support for FortiAP G-series models supporting WiFi 6E Tri-band and Dual 5 GHz modes 7.2.1

WTP profiles are supported for FortiAP G series access points (FAP-231G, FAP-233G, FAP-431G, FAP-433G). The G series models support Wi-Fi 6E IEEE 802.11ax Tri-band 2.4 GHz/5 GHz/6 GHz mode and dual 5 GHz mode.

To configure a FortiAP G series profile - GUI:
  1. From the FortiGate GUI, navigate to WiFi & Switch Controller > FortiAP Profiles and click Create New.
  2. In Platform, you can select a FortiAP G series model that supports WiFi 6E.

    Once you select a platform type, you can begin to configure the profile.

FortiAP G series models support three different radio configuration setups:

  • Tri-band mode: Single 5G, with Dedicated scan disabled

    This is the default setup when creating a new FortiAP G series profile.

    In this setup, Radio 1 works on the 2.4GHz 802.11ax/n/g bands, Radio 2 works on the 5GHz 802.11ax/ac/n/a bands, and Radio 3 works on the Wi-Fi 6E 6GHz 802.11ax bands.

  • Platform mode: Single 5G, with Dedicated scan enabled

    In the setup, Radio 1 works on the 2.4GHz 802.11ax/n/g bands, Radio 2 works on the 5GHz 802.11ax/ac/n/a bands, and Radio 3 works in monitor mode only.

    Note: When Dedicated scan is enabled, Radio 1 and Radio 2 will not spend any resources on scanning-related functions (for example, rogue AP detection, interfering SSID detection, and etc.). Radio 3 will be scanning all the time for all 2.4GHz, 5GHz, and 6GHz bands.

  • Platform mode: Dual 5G

    In the setup, Radio 1 works on the 2.4GHz 802.11ax/n/g bands, Radio 2 works on the 5GHz 802.11ax/ac/n/a bands but is limited to lower 5GHz channels, and Radio 3 works on the 5GHz 802.11ax/ac/n/a bands but with higher 5GHz channels.

    Note: Dedicated scan is always disabled in Dual 5G mode.

To configure a FortiAP G series profile - CLI:

FortiAP G series models support three different radio configuration setups:

  • Tri-band mode: Single 5G, Dedicated scan disabled

    config wireless-controller wtp-profile
      edit "FAP231G-setup1"
        config platform
          set type 231G
        end
        set handoff-sta-thresh 55
        config radio-1
          set band 802.11ax,n,g-only
          set channel "1" "6" "11"
        end
        config radio-2
          set band 802.11ax-5G
            set channel "36" "40" "44" "48" "149" "153" "157" "161" "165"
          end
          config radio-3
            set band 802.11ax-6G
            set channel "1" "5" "9" "13" "17" "21" "25" "29" "33" "37" "41" "45" "49" "53" "57" "61" "65" "69" "73" "77" "81" "85" "89" "93" "97" "101" "105" "109" "113" "117" "121" "125" "129" "133" "137" "141" "145" "149" "153" "157" "161" "165" "169" "173" "177" "181" "189" "193" "197" "201" "205" "209" "213" "217" "221" "225" "229" "233"
        end
      next
    end

    Note: The default value of platform mode is single-5G, and the default value of ddscan is disabled, so they are not shown in CLI.

    Note: For FortiAP G series models,  6GHz radio-3 as access point requires that VAPs must select one security mode from pure OWE, WPA3-SAE (sae-h2e-only must be enabled), WPA3-Enterprise, and WPA3-only-Enterprise.

  • Platform mode: Single 5G, Dedicated scan enabled

    When ddscan is enabled, radio-3 works only in monitor mode.

    config wireless-controller wtp-profile
      edit "FAP231G-setup2"
        config platform
          set type 231G
          set ddscan enable
        end
        set handoff-sta-thresh 55
        config radio-1
          set band 802.11ax,n,g-only
          set channel "1" "6" "11"
        end
        config radio-2
          set band 802.11ax-5G
          set channel "36" "40" "44" "48" "149" "153" "157" "161" "165"
        end
        config radio-3
          set mode monitor
        end
      next
    end
  • Platform mode: Dual 5G

    When platform mode is set to dual-5g, ddscan is always disabled and radio-3 6GHz operation becomes unavailable.

    config wireless-controller wtp-profile
      edit "FAP231G-setup3"
        config platform
          set type 231G
          set mode dual-5G
        end
        set handoff-sta-thresh 55
        config radio-1
          set band 802.11ax,n,g-only
          set channel "1" "6" "11"
        end
        config radio-2
          set band 802.11ax-5G
          set band-5g-type 5g-low
          set channel "36" "40" "44" "48"
        end
        config radio-3
          set band 802.11ax-5G
          set band-5g-type 5g-high
          set channel "149" "153" "157" "161" "165"
        end
      next
    end