Chapter 6 Deploying Wireless Networks : Configuring a WiFi LAN : Creating a FortiAP Profile
  
Creating a FortiAP Profile
A FortiAP Profile defines radio settings for a particular platform (FortiAP model). The profile also selects which SSIDs (virtual APs) the APs will carry. FortiAP units contain two radio transceivers, making it possible, for example, to provide both 2.4GHz 802.11b/g/n and 5GHz 802.11a/n service from the same access point. The radios can also be used for monitoring, used for the Rogue AP detection feature.
You can modify existing FortiAP profiles or create new ones of your own.
 
On FortiGate model 30D, web-based manager configuration of FortiAP Profiles is disabled by default. To enable AP profiles, enter the following CLI commands:
config system global
set gui-ap-profile enable
end
To configure a FortiAP Profile - web-based manager
1. Go to WiFi Controller > WiFi Network > FortiAP Profiles and select Create New.
2. Enter a Name for the FortiAP Profile.
3. In Platform, select the FortiWiFi or FortiAP model to which this profile applies.
4. For each radio, enter:
Mode
Select the type of mode.
• Disable – radio disabled
• Access Point – the platform is an access point
• Dedicated Monitor – the platform is a dedicated monitor. See “Wireless network monitoring”.
Spectrum Analysis
Select to enable monitoring other APs in the background, even while operating as an AP. This is needed for the Rogue AP detection feature. By default, spectrum analsis is disabled. See “Wireless network monitoring”.
WIDS Profile
Optionally, select a Wireless Intrusion Detection (WIDS) profile. See “Wireless IDS”.
Radio Resource Provision
Select to enable the radio resource provision feature. This feature measures utilization and interference on the available channels and selects the clearest channel at each access point. The measurement can be repeated periodically to respond to changing conditions.
Client Load Balancing
Select Frequency Handoff or AP Handoff as needed. See “Wireless client load balancing for high-density deployments”.
Band
Select the wireless protocols that you want to support. The available choices depend on the radio’s capabilities. Where multiple protocols are supported, the letter suffixes are combined: “802.11bg” means 802.11b and 802.11g. For 802.11n, 802.11n_2.4G indicates 2.4GHz, 802.11n_5G indicates 5GHz.
Note that on two-radio units such as the FortiAP-220B it is not possible to put both radios on the same band.
Select Channel Width
Select to enable 20MHz or 40MHz channel width for 802.11n-5G.
Short Guard Interval
Select to enable the short guard interval for 802.11n_5G with 40MHz channel width.
Channel
Select the channel or channels to include. The available channels depend on which IEEE wireless protocol you selected in Band. By default, all available channels are enabled.
Auto Tx Power Control
Optionally, enable automatic adjustment of transmit power, specifying minimum and maximum power levels.
TX Power
By default, the TX power is set to 100% of the maximum power permitted in your region. To change the level, drag the slider.
SSID
Choose the SSIDs (WiFi networks) that APs using this profile will carry.
Radio 1 settings are the same as Radio 2 settings except for the options for Channel. Radio 2 settings are available only for FortiAP models with dual radios.
5. Select OK.
To configure a FortiAP Profile - CLI
This example configures a FortiAP-220B to use only Radio 2 for 802.11g operation applied to SSID example_wlan.
config wireless-controller wtp-profile
edit guest_prof
config platform
set type 220B
end
config radio-2
set mode ap
set band 802.11g
set vaps example_wlan
end
end