Chapter 6 Deploying Wireless Networks for FortiOS 5.0 : Wireless network monitoring : Monitoring rogue APs : Configuring rogue scanning
  
Configuring rogue scanning
All APs using the Automatic profile share the same rogue scanning settings. APs using a custom AP profile follow the settings in the custom profile.
To enable rogue AP scanning for the automatic AP profile
1. Go to WiFi Controller > WiFi Network > Rogue AP Settings.
2. Select Enable Rogue AP Detection.
3. Select Enable On-wire Rogue AP Detection Technique if you want to use that method of distinguishing rogues from neighbors.
4. Select Apply.
To enable the rogue AP scanning feature for the automatic AP profile - CLI
config wireless-controller setting
set ap-scan enable
set on-wire-scan enable
end
To configure rogue AP scanning in a custom AP profile
1. Go to WiFi Controller > WiFi Network > Custom AP Profiles.
On some models, the menu is WiFi & Switch Controller.
2. Select an existing AP profile and edit it, or select Create New.
3. For each radio, select either Access Point or Dedicated Monitor, as required.
4. If you selected Access Point, enable Background Scan.
5. Select Rogue AP On-Wire Scan.
6. If needed, modify other settings.
7. Select OK.
To enable the rogue AP scanning feature in a custom AP profile - CLI
config wireless-controller wtp-profile
edit FAP220B-default
config radio-1
set mode ap
set ap-bgscan enable
set rogue-scan enable