Advanced Settings
With a FortiAP advanced management license, you can enable the following advanced settings.
|
Field |
Description |
|---|---|
| Radio Sensitivity (Rx-SOP) | The Receiver Start of Packet (Rx-SOP) configures a threshold to allow FortiAPs to adjust the SSID cell size. The radio discards all received wireless frames with minimum WiFi signal lesser than the configured threshold value. Adjusted cell size ensures that wireless clients are connected to the nearest FortiAP at highest possible data rates and distant clients do not deprive other clients of airtime. The valid range of signal strength is -95 to -20 dBm with a default value of -79 dBm for 2.4GHz and -76 dBm for 5GHz. |
| Probe Response Suppression | Restricts distant wireless clients from connecting to the FortiAP if the received signal strength is less than the configured threshold. The FortiAP does not send any probe response to these distant wireless clients and responds to the probe requests sent from nearby clients only. The valid range of signal strength is -95 to -20 dBm with a default value of -80 dBm. |
| Sticky Clients Removal | De-authenticates sticky wireless clients (distant clients that stick to the FortiAP) if the signal strength is less than the configured threshold. The valid range of signal strength is -95 to -20 dBm with a default value of -79 dBm for 2.4GHz and -76 dBm for 5GHz. |
| Protected Management Frames (802.11w) |
Provides a layer of security for wireless management frames by ensuring that traffic comes from legitimate sources. Network attackers and malicious entities are unable to disrupt legitimate wireless connections by sending spoofed clear text wireless management frames.
Note: Any change in the PMF configuration requires the controller to delete and then add the SSID. This disrupts existing connections. |
|
Fast BSS Transition (802.11r) |
This feature allows faster roaming for Wi-Fi clients by enabling swift BSS transitions between APs. This minimizes delay caused due to a client transitioning from one BSS to another in a multi-AP deployment.
|
| Voice Enterprise (802.11kv) |
802.11k network assisted roaming allows a potential roaming wireless client to collect from its current AP the list of compatible neighbour APs. This saves the wireless client from performing full scan on both bands. The wireless client selects and moves to the optimal neighbour AP from the list. The 802.11k also provides support for Radio Resource Management (RRM) such as APs querying the associated wireless clients for beacon reports and perceived RSSI used to prepare the compatible neighbour AP list for wireless clients. 802.11v network assisted roaming allows the wireless network to send requests to associated clients, recommending better APs to associate with while roaming. This is beneficial for both load balancing and in guiding clients with poor connectivity. The BSS Transition feature allows the roaming client to initiate a BSS transition query to the associated AP for a candidate list of other APs it can re-associate with, the associated AP responds with a BSS transition request containing the requested AP list. The AP can also send an unsolicited BSS transition request to the client. The client can accept the request and re-associate with the suggested APs or it can reject the request and continue its association with the current AP. |
| Airtime Fairness Weight (%) |
Wi-Fi has a natural tendency for clients farther away or clients at lower data rates to monopolize the airtime and drag down the overall performance. Airtime Fairness (ATF) helps to improve the overall network performance.
Airtime Fairness is supported with FOS 6.2.0 and on all FortiAP-S and FortiAP-W2 models. |
| Broadcast Suppression |
Suppresses the transmission of specific broadcast traffic to secure the wireless network and optimize airtime usage. When the received broadcast traffic exceeds the threshold, the interface discards it until the broadcast traffic drops below a specific threshold.
|
| L3 Firewall Profile | Create L3 Firewall rules. For more information, see Adding an L3 Firewall Profile. |
|
Block intra-SSID traffic |
To block intra-SSID network traffic. |
|
Tunnel Settings |
Select Tunnel Profile to add an existing GRE/L2TP Tunnel profile.
|
|
DHCP Option 82 |
DHCP option 82 (DHCP relay information) secures wireless networks served by FortiAPs against vulnerabilities that facilitate DHCP IP address starvation and spoofing/forging of IP and MAC addresses. The Circuit ID and Remote ID parameters enhance this security mechanism by allowing the FortiAP to include specific AP and client device information into the DHCP request packets. Both these options are disabled by default.
|
|
Radio and Rates Optional Settings |
Customize the 2.4 GHz and 5 GHz rate settings. |