FortiOS 5.6 Online Help Link FortiOS 5.4 Online Help Link FortiOS 5.2 Online Help Link FortiOS 5.0 Online Help Link

Home > Online Help

Creating a FortiAP Profile

A FortiAP Profile defines radio settings for a particular platform (FortiAP model). The profile also selects which SSIDs (virtual APs) the APs will carry. FortiAP units contain two radio transceivers, making it possible, for example, to provide both 2.4GHz 802.11b/g/n and 5GHz 802.11a/n service from the same access point. The radios can also be used for monitoring, used for the Rogue AP detection feature.

You can modify existing FortiAP profiles or create new ones of your own.

note icon On FortiGate model 30D, web-based manager configuration of FortiAP Profiles is disabled by default. To enable AP profiles, enter the following CLI commands:

config system settings
  set gui-ap-profile enable
To configure a FortiAP Profile - web-based manager
  1. Go to WiFi & Switch Controller > FortiAP Profiles and select Create New.
  2. Enter a Name for the FortiAP Profile.
  3. In Platform, select the FortiWiFi or FortiAP model to which this profile applies.
  4. If split tunneling is used, in Split Tunneling Subnets, enter a comma-separated list all of the destination IP address ranges that should not be routed through the the FortiGate WiFi controller.
  5. For each radio, enter:
Mode Select the type of mode.

Disable – radio disabled
Access Point – the platform is an access point
Dedicated Monitor – the platform is a dedicated monitor. See Wireless network monitoring.
WIDS Profile Optionally, select a Wireless Intrusion Detection (WIDS) profile. See Protecting the WiFi Network.
Radio Resource
Select to enable the radio resource provision feature. This feature measures utilization and interference on the available channels and selects the clearest channel at each access point. The measurement can be repeated periodically to respond to changing conditions.
Client Load
Select Frequency Handoff or AP Handoff as needed. See Access point deployment.
Band Select the wireless protocols that you want to support. The available choices depend on the radio’s capabilities. Where multiple protocols are supported, the letter suffixes are combined: “802.11g/b” means 802.11g and 802.11b.

Note that on two-radio units such as the FortiAP-221C it is not possible to put both radios on the same band.
Select Channel Width Select channel width for 802.11ac or 802.11n on 5GHz.
Short Guard
Select to enable the short guard interval for 802.11ac or 802.11n on 5GHz.
Channel Select the channel or channels to include. The available channels depend on which IEEE wireless protocol you selected in Band. By default, all available channels are enabled.
Auto Tx Power
Optionally, enable automatic adjustment of transmit power, specifying minimum and maximum power levels.
TX Power When Auto Tx Power is not used, the TX power is set by default to 100% of the maximum power permitted in your region. To change the level, drag the slider.
SSID Choose one of
Automatically assign Tunnel-mode SSIDs
Select SSIDs. Choose the required SSIDs.

Radio 1 settings are the same as Radio 2 settings except for the options for Channel.
Radio 2 settings are available only for FortiAP models with dual radios.

  1. Select OK.
To configure a FortiAP Profile - CLI

This example configures a FortiAP-220B to carry all SSIDs on Radio 1 but only SSID example_wlan on Radio 2.

config wireless-controller wtp-profile

edit guest_prof

config platform

set type 220B


config radio-1

set mode ap

set band 802.11g

set vap-all enable


config radio-2

set mode ap

set band 802.11g

set vaps example_wlan