config extension-controller extender-vap

FortiExtender wifi vap configuration.

config extension-controller extender-vap
    Description: FortiExtender wifi vap configuration.
    edit <name>
        set allowaccess {option1}, {option2}, ...
        set auth-server-address {string}
        set auth-server-port {integer}
        set auth-server-secret {string}
        set broadcast-ssid [disable|enable]
        set bss-color-partial [disable|enable]
        set dtim {integer}
        set end-ip {ipv4-address}
        set ip-address {ipv4-classnet-host}
        set max-clients {integer}
        set mu-mimo [disable|enable]
        set passphrase {password}
        set pmf [disabled|optional|...]
        set rts-threshold {integer}
        set sae-password {password}
        set security [OPEN|WPA2-Personal|...]
        set security-exempt-list {string}
        set security-external-web {string}
        set security-groups <name1>, <name2>, ...
        set security-mode [none|captive-portal]
        set security-redirect-url {string}
        set ssid {string}
        set start-ip {ipv4-address}
        set target-wake-time [disable|enable]
        set type [local-vap|lan-ext-vap]
    next
end

config extension-controller extender-vap

Parameter

Description

Type

Size

Default

allowaccess

Control management access to the managed extender. Separate entries with a space.

option

Option	Description
ping	PING access.
telnet	TELNET access.
http	HTTP access.
https	HTTPS access.
ssh	SSH access.
snmp	SNMP access.

auth-server-address

Wi-Fi Authentication Server Address (IPv4 format).

string

Maximum length: 63

auth-server-port

Wi-Fi Authentication Server Port.

integer

Minimum value: 1 Maximum value: 65535

auth-server-secret

Wi-Fi Authentication Server Secret.

string

Maximum length: 63

broadcast-ssid

Enable/disable Wi-Fi broadcast SSID.

option

enable

Option	Description
disable	Disable broadcast SSID.
enable	Enable broadcast SSID.

bss-color-partial

Enable/disable Wi-Fi 802.11AX BSS color partial (default = enable).

option

enable

Option	Description
disable	Disable bss color partial.
enable	Enable bss color partial.

dtim

Wi-Fi DTIM (1 - 255, default = 1).

integer

Minimum value: 1 Maximum value: 255

end-ip

End IP address.

ipv4-address

Not Specified

0.0.0.0

ip-address

Extender IP address.

ipv4-classnet-host

Not Specified

0.0.0.0 0.0.0.0

max-clients

Wi-Fi maximum clients (0 - 512, default = 0, which means no limit).

integer

Minimum value: 0 Maximum value: 512

mu-mimo

Enable/disable Wi-Fi multi-user MIMO (default = enable).

option

enable

Option	Description
disable	Disable multi-user MIMO.
enable	Enable multi-user MIMO.

name

Wi-Fi VAP name.

string

Maximum length: 15

passphrase

Wi-Fi passphrase.

password

Not Specified

pmf

Enable/disable Wi-Fi PMF (default = disable).

option

disabled

Option	Description
disabled	Disable PMF (Protected Management Frames).
optional	Set PMF (Protected Management Frames) optional.
required	Require PMF (Protected Management Frames).

rts-threshold

Wi-Fi RTS threshold (256 - 2347, default = 2347, which disables RTS/CTS).

integer

Minimum value: 256 Maximum value: 2347

2347

sae-password

Wi-Fi SAE Password.

password

Not Specified

security

Wi-Fi security.

option

WPA2-Personal

Option	Description
OPEN	Wi-Fi security OPEN
WPA2-Personal	Wi-Fi security WPA2 Personal
WPA-WPA2-Personal	Wi-Fi security WPA-WPA2 Personal
WPA3-SAE	Wi-Fi security WPA3 SAE
WPA3-SAE-Transition	Wi-Fi security WPA3 SAE Transition
WPA2-Enterprise	Wi-Fi security WPA2 Enterprise
WPA3-Enterprise-only	Wi-Fi security WPA3 Enterprise only
WPA3-Enterprise-transition	Wi-Fi security WPA3 Enterprise Transition
WPA3-Enterprise-192-bit	Wi-Fi security WPA3 Enterprise 192-bit

security-exempt-list *

Name of security exempt list.

string

Maximum length: 35

security-external-web *

URL of external authentication web server.

string

Maximum length: 255

security-groups <name> *

User groups that can authenticate with the captive portal.

Names of user groups that can authenticate with the captive portal.

string

Maximum length: 79

security-mode *

Turn on captive portal authentication for this Wi-Fi interface.

option

none

Option	Description
none	No security option.
captive-portal	Captive portal authentication.

security-redirect-url *

Optional URL for redirecting users after they pass captive portal authentication.

string

Maximum length: 255

ssid

Wi-Fi SSID.

string

Maximum length: 32

start-ip

Start IP address.

ipv4-address

Not Specified

0.0.0.0

target-wake-time

Enable/disable Wi-Fi 802.11AX target wake time (default = enable).

option

enable

Option	Description
disable	Disable target wake time.
enable	Enable target wake time.

type

Wi-Fi VAP type local-vap / lan-extension-vap.

option

Option	Description
local-vap	Local VAP.
lan-ext-vap	Lan Extension VAP.

* This parameter may not exist in some models.

config extension-controller extender-vap

FortiExtender wifi vap configuration.

config extension-controller extender-vap
    Description: FortiExtender wifi vap configuration.
    edit <name>
        set allowaccess {option1}, {option2}, ...
        set auth-server-address {string}
        set auth-server-port {integer}
        set auth-server-secret {string}
        set broadcast-ssid [disable|enable]
        set bss-color-partial [disable|enable]
        set dtim {integer}
        set end-ip {ipv4-address}
        set ip-address {ipv4-classnet-host}
        set max-clients {integer}
        set mu-mimo [disable|enable]
        set passphrase {password}
        set pmf [disabled|optional|...]
        set rts-threshold {integer}
        set sae-password {password}
        set security [OPEN|WPA2-Personal|...]
        set security-exempt-list {string}
        set security-external-web {string}
        set security-groups <name1>, <name2>, ...
        set security-mode [none|captive-portal]
        set security-redirect-url {string}
        set ssid {string}
        set start-ip {ipv4-address}
        set target-wake-time [disable|enable]
        set type [local-vap|lan-ext-vap]
    next
end

config extension-controller extender-vap

Parameter

Description

Type

Size

Default

allowaccess

Control management access to the managed extender. Separate entries with a space.

option

Option	Description
ping	PING access.
telnet	TELNET access.
http	HTTP access.
https	HTTPS access.
ssh	SSH access.
snmp	SNMP access.

auth-server-address

Wi-Fi Authentication Server Address (IPv4 format).

string

Maximum length: 63

auth-server-port

Wi-Fi Authentication Server Port.

integer

Minimum value: 1 Maximum value: 65535

auth-server-secret

Wi-Fi Authentication Server Secret.

string

Maximum length: 63

broadcast-ssid

Enable/disable Wi-Fi broadcast SSID.

option

enable

Option	Description
disable	Disable broadcast SSID.
enable	Enable broadcast SSID.

bss-color-partial

Enable/disable Wi-Fi 802.11AX BSS color partial (default = enable).

option

enable

Option	Description
disable	Disable bss color partial.
enable	Enable bss color partial.

dtim

Wi-Fi DTIM (1 - 255, default = 1).

integer

Minimum value: 1 Maximum value: 255

end-ip

End IP address.

ipv4-address

Not Specified

0.0.0.0

ip-address

Extender IP address.

ipv4-classnet-host

Not Specified

0.0.0.0 0.0.0.0

max-clients

Wi-Fi maximum clients (0 - 512, default = 0, which means no limit).

integer

Minimum value: 0 Maximum value: 512

mu-mimo

Enable/disable Wi-Fi multi-user MIMO (default = enable).

option

enable

Option	Description
disable	Disable multi-user MIMO.
enable	Enable multi-user MIMO.

name

Wi-Fi VAP name.

string

Maximum length: 15

passphrase

Wi-Fi passphrase.

password

Not Specified

pmf

Enable/disable Wi-Fi PMF (default = disable).

option

disabled

Option	Description
disabled	Disable PMF (Protected Management Frames).
optional	Set PMF (Protected Management Frames) optional.
required	Require PMF (Protected Management Frames).

rts-threshold

Wi-Fi RTS threshold (256 - 2347, default = 2347, which disables RTS/CTS).

integer

Minimum value: 256 Maximum value: 2347

2347

sae-password

Wi-Fi SAE Password.

password

Not Specified

security

Wi-Fi security.

option

WPA2-Personal

Option	Description
OPEN	Wi-Fi security OPEN
WPA2-Personal	Wi-Fi security WPA2 Personal
WPA-WPA2-Personal	Wi-Fi security WPA-WPA2 Personal
WPA3-SAE	Wi-Fi security WPA3 SAE
WPA3-SAE-Transition	Wi-Fi security WPA3 SAE Transition
WPA2-Enterprise	Wi-Fi security WPA2 Enterprise
WPA3-Enterprise-only	Wi-Fi security WPA3 Enterprise only
WPA3-Enterprise-transition	Wi-Fi security WPA3 Enterprise Transition
WPA3-Enterprise-192-bit	Wi-Fi security WPA3 Enterprise 192-bit

security-exempt-list *

Name of security exempt list.

string

Maximum length: 35

security-external-web *

URL of external authentication web server.

string

Maximum length: 255

security-groups <name> *

User groups that can authenticate with the captive portal.

Names of user groups that can authenticate with the captive portal.

string

Maximum length: 79

security-mode *

Turn on captive portal authentication for this Wi-Fi interface.

option

none

Option	Description
none	No security option.
captive-portal	Captive portal authentication.

security-redirect-url *

Optional URL for redirecting users after they pass captive portal authentication.

string

Maximum length: 255

ssid

Wi-Fi SSID.

string

Maximum length: 32

start-ip

Start IP address.

ipv4-address

Not Specified

0.0.0.0

target-wake-time

Enable/disable Wi-Fi 802.11AX target wake time (default = enable).

option

enable

Option	Description
disable	Disable target wake time.
enable	Enable target wake time.

type

Wi-Fi VAP type local-vap / lan-extension-vap.

option

Option	Description
local-vap	Local VAP.
lan-ext-vap	Lan Extension VAP.

* This parameter may not exist in some models.

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

Web Application / API Protection

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

All Products

CLI Reference

config extension-controller extender-vap

config extension-controller extender-vap

config extension-controller extender-vap

config extension-controller extender-vap

config extension-controller extender-vap

config extension-controller extender-vap