Provisioning Templates – FortiManager 5.2

To create a new custom AP profile (Radio operation mode disabled):

  1. From the custom AP profiles page, select Create New. The New AP Profile window opens.
New AP profile

Enter the following information:

Name Type a name for the profile.
Comment Optionally, type comments.
Platform Select the platform that the profile will apply to from the drop-down list.
Split Tunneling Subnet(s) Type the split tunneling subnet(s).
Radio 1 & 2 Configure the radio settings. The Radio 2 settings will only appear if applicable to the platform that is selected.
Operation Mode Select Disabled.
AP Country Code Select the access point country code from the drop-down list.
Advanced Options Configure advanced options for the SSID.
dtsl-in-kernal Select to enable or disable data channel DTLS in kernel.
dtls-policy Select clear-text, dtls-enable, or both.
handoff-rssi Type a value for RSSI handoff.
handoff-sta-thresh Type a value for the threshold.
ip-fragment-preventing Prevent IP fragmentation for CAPWAP tunnelled control and data packets. Select tcp-mss-adjust, icmp-unreachable, or both.
max-clients Type a value for the maximum number of clients.
split-tunneling-acl-localap-subnet Select to enable or disable split tunneling ACL local AP subnet.
tun-mtu-downlink Type the downlink tunnel MTU.
tun-mtu-uplink Type the uplink tunnel MTU.
  1. Select OK to create the new wireless profile.

To create a new custom AP profile (Radio operation mode Access Point):

  1. From the custom AP profiles page, select Create New. The New AP Profile window opens.
New AP profile

Enter the following information:

Name Type a name for the profile.
Comment Optionally, type comments.
Platform Select the platform that the profile will apply to from the drop-down list.
Split Tunneling Subnet(s) Type the split tunneling subnet(s).
Radio 1 & 2 Configure the radio settings. The Radio 2 settings will only appear if applicable to the platform that is selected.
Operation Mode Select Access Point (default).
Background Scan Enable or disable background scanning.
 WIDS Profile Select a WIDS profile from the drop-down list.
Rogue AP On-Wire Scan Select to enable rogue AP on-wire scan.

This option is only available is the operation mode is set to Dedicated Monitor, or if background scan is enabled.

Radio Resource Provision Select to enable radio resource provisioning.
Client Load Balance Select the client load balancing methods to use. Frequency and/or AP handoff can be used.
Band Selected the wireless band from the drop-down list. The bands available are dependent on the platform selected.
Channel Select the channel or channels that are available. The channels available are dependent on the platform selected.
Auto TX Power Control Enable or disable automatic TX power control.
TX Power If Auto TX PowerControl is disabled, type the TX power in the form of the percentage of the total available power.
TX Power Low If Auto TX PowerControl is enabled, type the minimum TX power in dBm.
TX Power High If Auto TX PowerControl is enabled, type the maximum TX power in dBm.
SSID Select available SSIDs from the Available box, and move them to the Selected box using the arrow buttons to select the SSIDs to apply to this profile.
AP Country Code Select the access point country code from the drop-down list.
Advanced Options For more information, see “Provisioning Templates” on page 229.
  1. Select OK to create the new wireless profile.
This entry was posted in Administration Guides, FortiManager and tagged , , on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.