Enabling and configuring a discovered AP
Within two minutes of connecting the AP unit to the FortiGate unit, the discovered unit should be listed on WiFi Controller > Managed Access Points > Managed FortiAP page.
Figure 161: Discovered access point unit
When you authorize (enable) a FortiAP unit, it is configured by default to
• use the Automatic profile
• operate at the maximum radio power permitted in your region
• carry all SSIDs
You can change the radio power and selection of SSIDs or assign the unit to a custom AP profile which defines the entire configuration for the AP.
To add and configure the discovered AP unit - web-based manager
1. Go to WiFi Controller > Managed Access Points > Managed FortiAP.
This configuration also applies to local WiFi radio on FortiWiFi models.
2. Select the FortiAP unit from the list and edit it.
3. Optionally, enter a Name. Otherwise, the unit will be identified by serial number.
4. Select Authorize.
5. If you want to use the Automatic profile, adjust its settings if needed:
Enable WiFi Radio | This must be selected to enable operation of this AP. |
SSID | Automatically Inherit all SSIDs — AP will carry all WiFi networks. Select SSIDs — select individual SSIDs for this AP to carry. |
Auto TX Power Control | If you enable automatic transmitter power control, adjust TX Power Low and TX Power High to set the power range. |
Tx Power | If you are not using automatic power control, adjust AP transmitter power. The 100% setting is the maximum permitted in your country. See “Setting your geographic location” |
6. If you want to use a custom AP profile, in AP Profile select Change, choose the AP Profile. Select Apply.
7. Optionally, select Do not participate in Rogue AP scanning if scanning adversely affects traffic.
8. Select OK.
The physical access point is now added to the system. If the rest of the configuration is complete, it should be possible to connect to the wireless network through the AP.
To add the discovered AP unit - CLI
First get a list of the discovered access point unit serial numbers:
get wireless-controller wtp
Add a discovered unit and associate it with AP-profile1, for example:
config wireless-controller wtp
edit FAP22A3U10600118
set admin enable
set wtp-profile AP-profile1
end
To use the automatic profile, leave the wtp-profile field unset.
To modify settings within the Automatic profile - CLI
When wtp-profile is unset (null value), the Automatic profile is in use and some of its settings can be adjusted. This example sets the AP to carry only the employee and guest SSIDs and operate at 80% of maximum power.
config wireless-controller wtp
edit FAP22A3U10600118
set radio-enable enable
set vap-all disable
set vaps employee guest
set power-level 80
end
To select a custom AP profile - CLI
config wireless-controller wtp
edit FAP22A3U10600118
set wtp-profile AP-profile1
end
To select automatic AP profile - CLI
config wireless-controller wtp
edit FAP22A3U10600118
unset wtp-profile
end
To view the status of the added AP unit
config wireless-controller wtp
edit FAP22A3U10600118
get
The join-time field should show a time, not “N/A”. See the preceding web-based manager procedure for more information.
