Factory default SSIDs and AP Profiles configuration updated FMG 7.4.2

This information is also available in the FortiManager 7.4 Administration Guide: AP Manager FortiSwitch Manager

Factory Default SSIDs and AP Profiles configuration updated with optimized settings for performance, increased security and a new Voice SSID.

• SSID templates

• FortiAP profiles

• ARRP profile

SSID templates

The following enhancements have been made to SSID templates:

1. Existing default SSID templates have been renamed:

   • Corporate_Fortinet_Default renamed to Enterprise_Fortinet_Default.

   • POS_Fortinet_Default renamed to IoT_Fortinet_Default.
     

2. For all default SSIDs, multicast-enhance is now disabled by default.
   

3. In the IoT_Fortinet_Default SSID, the Pre-shared Key Mode setting is set to multiple.
   

4. Added a new SSID template called Voice_Fortinet_Default with the following configuration.

   • Security Mode set to WPA2-Personal.

   • Enable voice-enterprise (802.11k/v).

   • Enable fast-bss-transition (802.11.r).

   • Set Device Detection to enable.

   • Set a default QoS Profile.
     

FortiAP profiles

The following updates have been made for FortiAP Profiles:

1. The following AP profiles are removed:
   • Corporate_Fortinet_Default
   • Guest_Fortinet_Default
   • POS_Fortinet_Default
2. The following new AP profiles are introduced:

   • Voice/Enterprise_Fortinet_Default

   • Basic_Data_Fortinet_Default

   • High_Throughput_Data_Fortinet_Default

   • High_Throughput_Data_Dual5GHz_Fortinet_Default

   • RTLS/Presence_Fortinet_Default
     

3. The following configurations are common to all default AP Profiles:

   • Set 2.4GHz radio band to 802.11ax/g/n (exclude b).

   • Set 2.4GHz channel width 20MHz.

   • Set 2.4GHz channel plan to Three Channels by default.

   • Set ARRP-Profile to arrp-default.

   • Set Short Guard Interval to enable on all radios.

   • Set Radio Resource Provisioning to enable on all radios.

   • Set SSIDs to Manual for all radios.
     

   • 5GHz set to default 802.11ax/ac/n/a - include a (matching g data rates).
     

4. Specific configurations are also applied to each AP profile:

   • Voice/Enterprise_Fortinet_Default:

     • Set channel width to 20MHz for 5GHz band

     • Set channel width to 40MHz on 6GHz (if applicable AP model selected)

     • 2.4GHz Transmit Power Mode - dBm - 13dBm

     • 5GHz Transmit Power Mode - dBm - 16dBm

     • 6GHz Transmit Power Mode - dBm – 19dBm
       
       
       

   • Basic_Data_Fortinet_Default

     • Set channel width to 20MHz for 5GHz band

     • Set channel width to 40MHz on 6GHz (if applicable AP model selected)

     • 2.4GHz Transmit Power Mode - Auto – 10 to 17 dBm

     • 5GHz Transmit Power Mode - Auto - 13 to 20 dBm

     • 6GHz Transmit Power Mode - Auto - 16 to 23 dBm
       
       
       

   • High_Throughput_Data_Fortinet_Default

     • Set 5GHz channel width to 40MHz – Up to 12 available channels including DFS frequencies

     • Set 6GHz channel width to 80MHz (if applicable AP model selected) – Up to 14 available channels

     • 2.4GHz Transmit Power Mode – Auto – 10dBm to 14dBm

     • 5GHz Transmit Power Mode - Auto – 13 to 17dBm

     • 6GHz Transmit Power Mode - Auto – 16 to 20dBm (if applicable AP model selected)
       
       
       

   • High_Throughput_Data_Dual5GHz_Fortinet_Default

     • Set 5GHz channel width to 40MHz – Up to 12 available channels including DFS frequencies

     • Set 6GHz channel width to 80MHz (if applicable AP model selected) – Up to 14 available channels

     • 2.4GHz Transmit Power Mode – Auto – 10dBm to 14dBm

     • 5GHz Transmit Power Mode - Auto – 13 to 17dBm

     • 5GHz Transmit Power Mode - Auto – 13 to 17dBm (if applicable dual 5GHz AP model selected)

       
       

   • RTLS/Presence_Fortinet_Default

     • Set channel width to 20MHz for 5GHz band

     • Set channel width to 40MHz on 6GHz (if applicable AP model selected)

     • 2.4GHz Transmit Power Mode - dBm - 10dBm

     • 5GHz Transmit Power Mode - dBm - 14dBm

     • 6GHz Transmit Power Mode - dBm – 17dBm

     • Location Based Services - Set Locate WiFi Clients When Not Connected to enable

     • BLE Radio enabled

     • Disable RRP
       
       
       

ARRP profile

ARRP Profiles have been relocated from Protection Profiles to Operation Profiles.