config wireless-controller setting

VDOM wireless controller configuration.

config wireless-controller setting
    Description: VDOM wireless controller configuration.
    set account-id {string}
    set country [--|AF|...]
    set darrp-optimize {integer}
    set darrp-optimize-schedules <name1>, <name2>, ...
    set device-holdoff {integer}
    set device-idle {integer}
    set device-weight {integer}
    set duplicate-ssid [enable|disable]
    set fake-ssid-action {option1}, {option2}, ...
    set fapc-compatibility [enable|disable]
    set firmware-provision-on-authorization [enable|disable]
    config offending-ssid
        Description: Configure offending SSID.
        edit <id>
            set ssid-pattern {string}
            set action {option1}, {option2}, ...
        next
    end
    set phishing-ssid-detect [enable|disable]
    set wfa-compatibility [enable|disable]
end

config wireless-controller setting

Parameter

Description

Type

Size

Default

account-id

FortiCloud customer account ID.

string

Maximum length: 63

country

Country or region in which the FortiGate is located. The country determines the 802.11 bands and channels that are available.

option

Option	Description
--	NO_COUNTRY_SET
AF	AFGHANISTAN
AL	ALBANIA
DZ	ALGERIA
AS	AMERICAN SAMOA
AO	ANGOLA
AR	ARGENTINA
AM	ARMENIA
AU	AUSTRALIA
AT	AUSTRIA
AZ	AZERBAIJAN
BS	BAHAMAS
BH	BAHRAIN
BD	BANGLADESH
BB	BARBADOS
BY	BELARUS
BE	BELGIUM
BZ	BELIZE
BJ	BENIN
BM	BERMUDA
BT	BHUTAN
BO	BOLIVIA
BA	BOSNIA AND HERZEGOVINA
BW	BOTSWANA
BR	BRAZIL
BN	BRUNEI DARUSSALAM
BG	BULGARIA
BF	BURKINA-FASO
KH	CAMBODIA
CM	CAMEROON
KY	CAYMAN ISLANDS
CF	CENTRAL AFRICA REPUBLIC
TD	CHAD
CL	CHILE
CN	CHINA
CX	CHRISTMAS ISLAND
CO	COLOMBIA
CG	CONGO REPUBLIC
CD	DEMOCRATIC REPUBLIC OF CONGO
CR	COSTA RICA
HR	CROATIA
CY	CYPRUS
CZ	CZECH REPUBLIC
DK	DENMARK
DJ	DJIBOUTI
DM	DOMINICA
DO	DOMINICAN REPUBLIC
EC	ECUADOR
EG	EGYPT
SV	EL SALVADOR
ET	ETHIOPIA
EE	ESTONIA
GF	FRENCH GUIANA
PF	FRENCH POLYNESIA
FO	FAEROE ISLANDS
FJ	FIJI
FI	FINLAND
FR	FRANCE
GA	GABON
GE	GEORGIA
GM	GAMBIA
DE	GERMANY
GH	GHANA
GI	GIBRALTAR
GR	GREECE
GL	GREENLAND
GD	GRENADA
GP	GUADELOUPE
GU	GUAM
GT	GUATEMALA
GY	GUYANA
HT	HAITI
HN	HONDURAS
HK	HONG KONG
HU	HUNGARY
IS	ICELAND
IN	INDIA
ID	INDONESIA
IQ	IRAQ
IE	IRELAND
IM	ISLE OF MAN
IL	ISRAEL
IT	ITALY
CI	COTE_D_IVOIRE
JM	JAMAICA
JO	JORDAN
KZ	KAZAKHSTAN
KE	KENYA
KR	KOREA REPUBLIC
KW	KUWAIT
LA	LAOS
LV	LATVIA
LB	LEBANON
LS	LESOTHO
LR	LIBERIA
LY	LIBYA
LI	LIECHTENSTEIN
LT	LITHUANIA
LU	LUXEMBOURG
MO	MACAU SAR
MK	MACEDONIA, FYRO
MG	MADAGASCAR
MW	MALAWI
MY	MALAYSIA
MV	MALDIVES
ML	MALI
MT	MALTA
MH	MARSHALL ISLANDS
MQ	MARTINIQUE
MR	MAURITANIA
MU	MAURITIUS
YT	MAYOTTE
MX	MEXICO
FM	MICRONESIA
MD	REPUBLIC OF MOLDOVA
MC	MONACO
MN	MONGOLIA
MA	MOROCCO
MZ	MOZAMBIQUE
MM	MYANMAR
NA	NAMIBIA
NP	NEPAL
NL	NETHERLANDS
AN	NETHERLANDS ANTILLES
AW	ARUBA
NZ	NEW ZEALAND
NI	NICARAGUA
NE	NIGER
NG	NIGERIA
NO	NORWAY
MP	NORTHERN MARIANA ISLANDS
OM	OMAN
PK	PAKISTAN
PW	PALAU
PA	PANAMA
PG	PAPUA NEW GUINEA
PY	PARAGUAY
PE	PERU
PH	PHILIPPINES
PL	POLAND
PT	PORTUGAL
PR	PUERTO RICO
QA	QATAR
RE	REUNION
RO	ROMANIA
RU	RUSSIA
RW	RWANDA
BL	SAINT BARTHELEMY
KN	SAINT KITTS AND NEVIS
LC	SAINT LUCIA
MF	SAINT MARTIN
PM	SAINT PIERRE AND MIQUELON
VC	SAINT VINCENT AND GRENADIENS
SA	SAUDI ARABIA
SN	SENEGAL
RS	REPUBLIC OF SERBIA
ME	MONTENEGRO
SL	SIERRA LEONE
SG	SINGAPORE
SK	SLOVAKIA
SI	SLOVENIA
SO	SOMALIA
ZA	SOUTH AFRICA
ES	SPAIN
LK	SRI LANKA
SR	SURINAME
SZ	SWAZILAND
SE	SWEDEN
CH	SWITZERLAND
TW	TAIWAN
TZ	TANZANIA
TH	THAILAND
TG	TOGO
TT	TRINIDAD AND TOBAGO
TN	TUNISIA
TR	TURKEY
TM	TURKMENISTAN
AE	UNITED ARAB EMIRATES
TC	TURKS AND CAICOS
UG	UGANDA
UA	UKRAINE
GB	UNITED KINGDOM
US	UNITED STATES2
PS	UNITED STATES (PUBLIC SAFETY)
UY	URUGUAY
UZ	UZBEKISTAN
VU	VANUATU
VE	VENEZUELA
VN	VIET NAM
VI	VIRGIN ISLANDS
WF	WALLIS AND FUTUNA
YE	YEMEN
ZM	ZAMBIA
ZW	ZIMBABWE
JP	JAPAN14
CA	CANADA2

darrp-optimize

Time for running Dynamic Automatic Radio Resource Provisioning.

integer

Minimum value: 0 Maximum value: 86400

86400

darrp-optimize-schedules <name>

Firewall schedules for DARRP running time. DARRP will run periodically based on darrp-optimize within the schedules. Separate multiple schedule names with a space.

Schedule name.

string

Maximum length: 35

device-holdoff

Lower limit of creation time of device for identification in minutes.

integer

Minimum value: 0 Maximum value: 60

device-idle

Upper limit of idle time of device for identification in minutes.

integer

Minimum value: 0 Maximum value: 14400

1440

device-weight

Upper limit of confidence of device for identification.

integer

Minimum value: 0 Maximum value: 255

duplicate-ssid

Enable/disable allowing Virtual Access Points (VAPs) to use the same SSID name in the same VDOM.

option

disable

Option	Description
enable	Allow VAPs to use the same SSID name in the same VDOM.
disable	Do not allow VAPs to use the same SSID name in the same VDOM.

fake-ssid-action

Actions taken for detected fake SSID.

option

log

Option	Description
log	Write logs for detected fake SSID.
suppress	Suppress detected fake SSID.

fapc-compatibility

Enable/disable FAP-C series compatibility.

option

disable

Option	Description
enable	Enable FAP-C series compatibility.
disable	Disable FAP-C series compatibility.

firmware-provision-on-authorization

Enable/disable automatic provisioning of latest firmware on authorization.

option

disable

Option	Description
enable	Enable firmware provision on authorization.
disable	Disable firmware provision on authorization.

phishing-ssid-detect

Enable/disable phishing SSID detection.

option

enable

Option	Description
enable	Enable phishing SSID detection.
disable	Disable phishing SSID detection.

wfa-compatibility

Enable/disable WFA compatibility.

option

disable

Option	Description
enable	Enable Wi-Fi Alliance Certification compatibility.
disable	Disable Wi-Fi Alliance Certification compatibility.

config offending-ssid

Parameter

Description

Type

Size

Default

ID.

integer

Minimum value: 0 Maximum value: 65535

ssid-pattern

Define offending SSID pattern (case insensitive). For example, word, word*, *word, wo*rd.

string

Maximum length: 33

action

Actions taken for detected offending SSID.

option

log

Option	Description
log	Generate logs for detected offending SSID.
suppress	Suppress detected offending SSID.

config wireless-controller setting

VDOM wireless controller configuration.

config wireless-controller setting
    Description: VDOM wireless controller configuration.
    set account-id {string}
    set country [--|AF|...]
    set darrp-optimize {integer}
    set darrp-optimize-schedules <name1>, <name2>, ...
    set device-holdoff {integer}
    set device-idle {integer}
    set device-weight {integer}
    set duplicate-ssid [enable|disable]
    set fake-ssid-action {option1}, {option2}, ...
    set fapc-compatibility [enable|disable]
    set firmware-provision-on-authorization [enable|disable]
    config offending-ssid
        Description: Configure offending SSID.
        edit <id>
            set ssid-pattern {string}
            set action {option1}, {option2}, ...
        next
    end
    set phishing-ssid-detect [enable|disable]
    set wfa-compatibility [enable|disable]
end

config wireless-controller setting

Parameter

Description

Type

Size

Default

account-id

FortiCloud customer account ID.

string

Maximum length: 63

country

Country or region in which the FortiGate is located. The country determines the 802.11 bands and channels that are available.

option

Option	Description
--	NO_COUNTRY_SET
AF	AFGHANISTAN
AL	ALBANIA
DZ	ALGERIA
AS	AMERICAN SAMOA
AO	ANGOLA
AR	ARGENTINA
AM	ARMENIA
AU	AUSTRALIA
AT	AUSTRIA
AZ	AZERBAIJAN
BS	BAHAMAS
BH	BAHRAIN
BD	BANGLADESH
BB	BARBADOS
BY	BELARUS
BE	BELGIUM
BZ	BELIZE
BJ	BENIN
BM	BERMUDA
BT	BHUTAN
BO	BOLIVIA
BA	BOSNIA AND HERZEGOVINA
BW	BOTSWANA
BR	BRAZIL
BN	BRUNEI DARUSSALAM
BG	BULGARIA
BF	BURKINA-FASO
KH	CAMBODIA
CM	CAMEROON
KY	CAYMAN ISLANDS
CF	CENTRAL AFRICA REPUBLIC
TD	CHAD
CL	CHILE
CN	CHINA
CX	CHRISTMAS ISLAND
CO	COLOMBIA
CG	CONGO REPUBLIC
CD	DEMOCRATIC REPUBLIC OF CONGO
CR	COSTA RICA
HR	CROATIA
CY	CYPRUS
CZ	CZECH REPUBLIC
DK	DENMARK
DJ	DJIBOUTI
DM	DOMINICA
DO	DOMINICAN REPUBLIC
EC	ECUADOR
EG	EGYPT
SV	EL SALVADOR
ET	ETHIOPIA
EE	ESTONIA
GF	FRENCH GUIANA
PF	FRENCH POLYNESIA
FO	FAEROE ISLANDS
FJ	FIJI
FI	FINLAND
FR	FRANCE
GA	GABON
GE	GEORGIA
GM	GAMBIA
DE	GERMANY
GH	GHANA
GI	GIBRALTAR
GR	GREECE
GL	GREENLAND
GD	GRENADA
GP	GUADELOUPE
GU	GUAM
GT	GUATEMALA
GY	GUYANA
HT	HAITI
HN	HONDURAS
HK	HONG KONG
HU	HUNGARY
IS	ICELAND
IN	INDIA
ID	INDONESIA
IQ	IRAQ
IE	IRELAND
IM	ISLE OF MAN
IL	ISRAEL
IT	ITALY
CI	COTE_D_IVOIRE
JM	JAMAICA
JO	JORDAN
KZ	KAZAKHSTAN
KE	KENYA
KR	KOREA REPUBLIC
KW	KUWAIT
LA	LAOS
LV	LATVIA
LB	LEBANON
LS	LESOTHO
LR	LIBERIA
LY	LIBYA
LI	LIECHTENSTEIN
LT	LITHUANIA
LU	LUXEMBOURG
MO	MACAU SAR
MK	MACEDONIA, FYRO
MG	MADAGASCAR
MW	MALAWI
MY	MALAYSIA
MV	MALDIVES
ML	MALI
MT	MALTA
MH	MARSHALL ISLANDS
MQ	MARTINIQUE
MR	MAURITANIA
MU	MAURITIUS
YT	MAYOTTE
MX	MEXICO
FM	MICRONESIA
MD	REPUBLIC OF MOLDOVA
MC	MONACO
MN	MONGOLIA
MA	MOROCCO
MZ	MOZAMBIQUE
MM	MYANMAR
NA	NAMIBIA
NP	NEPAL
NL	NETHERLANDS
AN	NETHERLANDS ANTILLES
AW	ARUBA
NZ	NEW ZEALAND
NI	NICARAGUA
NE	NIGER
NG	NIGERIA
NO	NORWAY
MP	NORTHERN MARIANA ISLANDS
OM	OMAN
PK	PAKISTAN
PW	PALAU
PA	PANAMA
PG	PAPUA NEW GUINEA
PY	PARAGUAY
PE	PERU
PH	PHILIPPINES
PL	POLAND
PT	PORTUGAL
PR	PUERTO RICO
QA	QATAR
RE	REUNION
RO	ROMANIA
RU	RUSSIA
RW	RWANDA
BL	SAINT BARTHELEMY
KN	SAINT KITTS AND NEVIS
LC	SAINT LUCIA
MF	SAINT MARTIN
PM	SAINT PIERRE AND MIQUELON
VC	SAINT VINCENT AND GRENADIENS
SA	SAUDI ARABIA
SN	SENEGAL
RS	REPUBLIC OF SERBIA
ME	MONTENEGRO
SL	SIERRA LEONE
SG	SINGAPORE
SK	SLOVAKIA
SI	SLOVENIA
SO	SOMALIA
ZA	SOUTH AFRICA
ES	SPAIN
LK	SRI LANKA
SR	SURINAME
SZ	SWAZILAND
SE	SWEDEN
CH	SWITZERLAND
TW	TAIWAN
TZ	TANZANIA
TH	THAILAND
TG	TOGO
TT	TRINIDAD AND TOBAGO
TN	TUNISIA
TR	TURKEY
TM	TURKMENISTAN
AE	UNITED ARAB EMIRATES
TC	TURKS AND CAICOS
UG	UGANDA
UA	UKRAINE
GB	UNITED KINGDOM
US	UNITED STATES2
PS	UNITED STATES (PUBLIC SAFETY)
UY	URUGUAY
UZ	UZBEKISTAN
VU	VANUATU
VE	VENEZUELA
VN	VIET NAM
VI	VIRGIN ISLANDS
WF	WALLIS AND FUTUNA
YE	YEMEN
ZM	ZAMBIA
ZW	ZIMBABWE
JP	JAPAN14
CA	CANADA2

darrp-optimize

Time for running Dynamic Automatic Radio Resource Provisioning.

integer

Minimum value: 0 Maximum value: 86400

86400

darrp-optimize-schedules <name>

Firewall schedules for DARRP running time. DARRP will run periodically based on darrp-optimize within the schedules. Separate multiple schedule names with a space.

Schedule name.

string

Maximum length: 35

device-holdoff

Lower limit of creation time of device for identification in minutes.

integer

Minimum value: 0 Maximum value: 60

device-idle

Upper limit of idle time of device for identification in minutes.

integer

Minimum value: 0 Maximum value: 14400

1440

device-weight

Upper limit of confidence of device for identification.

integer

Minimum value: 0 Maximum value: 255

duplicate-ssid

Enable/disable allowing Virtual Access Points (VAPs) to use the same SSID name in the same VDOM.

option

disable

Option	Description
enable	Allow VAPs to use the same SSID name in the same VDOM.
disable	Do not allow VAPs to use the same SSID name in the same VDOM.

fake-ssid-action

Actions taken for detected fake SSID.

option

log

Option	Description
log	Write logs for detected fake SSID.
suppress	Suppress detected fake SSID.

fapc-compatibility

Enable/disable FAP-C series compatibility.

option

disable

Option	Description
enable	Enable FAP-C series compatibility.
disable	Disable FAP-C series compatibility.

firmware-provision-on-authorization

Enable/disable automatic provisioning of latest firmware on authorization.

option

disable

Option	Description
enable	Enable firmware provision on authorization.
disable	Disable firmware provision on authorization.

phishing-ssid-detect

Enable/disable phishing SSID detection.

option

enable

Option	Description
enable	Enable phishing SSID detection.
disable	Disable phishing SSID detection.

wfa-compatibility

Enable/disable WFA compatibility.

option

disable

Option	Description
enable	Enable Wi-Fi Alliance Certification compatibility.
disable	Disable Wi-Fi Alliance Certification compatibility.

config offending-ssid

Parameter

Description

Type

Size

Default

ID.

integer

Minimum value: 0 Maximum value: 65535

ssid-pattern

Define offending SSID pattern (case insensitive). For example, word, word*, *word, wo*rd.

string

Maximum length: 33

action

Actions taken for detected offending SSID.

option

log

Option	Description
log	Generate logs for detected offending SSID.
suppress	Suppress detected offending SSID.

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

CLI Reference

config wireless-controller setting

config wireless-controller setting

config wireless-controller setting

config offending-ssid

config wireless-controller setting

config wireless-controller setting

config wireless-controller setting

config offending-ssid