Connecting the FortiAP units
You need to connect each FortiAP unit to the FortiGate unit, wait for it to be recognized, and then assign it to the AP Profile. But first, you must configure the interface to which the FortiAP units connect and the DHCP server that assigns their IP addresses.
In this example, the FortiAP units connect to port 3 and are controlled through IP addresses on the 192.168.8.0/24 network.
To configure the interface for the AP unit - web-based manager
1. Go to System > Network > Interfaces and edit the port3 interface.
2. Set the Addressing mode to Dedicate to FortiAP and set the IP/Network Mask to 192.168.8.1/255.255.255.0.
3. Select OK.
This procedure automatically configures a DHCP server for the AP units. You can see this configuration in System > Network > DHCP Server.
To configure the interface for the AP unit - CLI
config system interface
edit port3
set mode static
set ip 192.168.8.1 255.255.255.0
end
To configure the DHCP server for AP units - CLI
config system dhcp server
edit 0
set interface port3
config exclude-range
edit 1
set end-ip 192.168.8.1
set start-ip 192.168.8.1
end
config ip-range
edit 1
set end-ip 192.168.8.254
set start-ip 192.168.8.2
end
set netmask 255.255.255.0
set vci-match enable
set vci-string "FortiAP"
end
To connect a FortiAP unit - web-based manager
1. Go to WiFi Controller > Managed Access Points > Managed FortiAP.
2. Connect the FortiAP unit to port 3.
3. Periodically select Refresh while waiting for the FortiAP unit to be listed.
Recognition of the FortiAP unit can take up to two minutes.
If FortiAP units are connected but cannot be recognized, try disabling VCI-Match in the DHCP server settings.
4. When the FortiAP unit is listed, select the entry to edit it.
The Edit Managed Access Point window opens.
5. In State, select Authorize.
6. Make sure that AP Profile is set to Automatic.
7. In SSID, select Automatically Inherit all SSIDs.
8. Select OK.
9. Repeat Steps
2 through
8 for each FortiAP unit.
To connect a FortiAP unit - CLI
1. Connect the FortiAP unit to port 3.
2. Enter
config wireless-controller wtp
3. Wait 30 seconds, then enter get.
Retry the get command every 15 seconds or so until the unit is listed, like this:
== [ FAP22A3U10600118 ]
wtp-id: FAP22A3U10600118
4. Edit the discovered FortiAP unit like this:
edit FAP22A3U10600118
set admin enable
end
5. Repeat Steps
2 through
4 for each FortiAP unit.