Skip to main content
spathak
Staff
Staff
October 16, 2020

Technical Tip: FortiCloud-managed FortiAP WiFi

  • October 16, 2020
  • 1 reply
  • 14251 views
Description
In this example, FortiCloud is used to configure a single FortiAP-221C, creating a working WiFi network without a FortiGate.
FortiCloud remote management is supported on FortiAP models 221C and 320C.

For this configuration, the FortiAP-221C unit is running version 5.2 firmware.
Create a simple network that uses WPA-Personal authentication.

Register for a free FortiCloud account at www.forticloud.com.

To create the WiFi network without a FortiGate:
- Add the FortiAP to FortiCloud.
- Configure the SSID.
- Configure the AP platform profile.
- Deploy the AP with the profile.

This article discusses about FortiCloud-managed FortiAP WiFi.


Solution
Adding the FortiAP to FortiCloud.

It is necessary to add the FortiAP to thr FortiCloud account.
This is done through a unique key that can be found under the FortiAP.

To add a FortiAP to FortiCloud.

1) Connect the FortiAP Ethernet interface to a network that provides access to the Internet.
2) Open a web browser and navigate to the FortiCloud main page and 'select + FortiAP Network'.
3) Enter an AP Network Name and AP Password. This password is used to locally log in to the AP as the administrator. It will be set to all FortiAPs in this FortiAP network.
4) Set the correct Time Zone and select Submit.

Configuring the SSID.

Establish the SSID (network interface) for the WiFi network is necessary.

To configure the SSID.

1) Select the FortiAP just created from the home page. Add an SSID for the AP Network will be possible. In the interface, this is under Configure -> SSIDs.
2) In Access Control, enter the name of the SSID, set Authentication to WPA2-Personal, enter the Pre-shared Key, and select 'Next'.
3) In Security, enable security features as required (select from AntiVirus, Intrusion Prevention, Block Botnet, Web Access, and Application Control) and select 'Next'.
4) In Availability, make sure to leave 5 GHz enabled, configure a schedule as required, and select 'Next'.
5) Review the SSID in Preview, then select 'Apply'.

Configuring the FortiAP platform profile.

The radio portion of the FortiAP configuration is contained in the FortiAP platform profile. By default, there is a profile for each platform (FortiAP model).
The SSID needs to be specified in the profile.

To configure the FortiAP profile.

1) Go to Configure -> AP Profile and edit the AP Profile for the FortiAP model (mouse-over the AP Profile to reveal the Edit button).
2) Enable the SSID configured earlier for both Radio 1 and Radio 2, for 5GHz coverage.
Deploying the AP with the platform profile
With the SSID and platform profile configured, deploy the FortiAP by entering the FortiCloud key for the FortiAP.

To deploy the AP.

1) Go to Configure -> Deploy APsEnter the FortiCloud key will be authorized, which can be found on the same label as the FortiAP unit's serial number, and select 'Submit'.
If there is a FortiAP model that does not include a FortiCloud key, add the unit to the network. To learn how, see the FortiCloud-managed FortiAP WiFi without a key configuration.
2) In Set Platform Profiles, select the platform profile created earlier and select 'Next'.
3) Follow the rest of the deployment wizard. Select 'Submit' when completed.

Connect to the wireless network and browse the Internet will be now possible.
On the FortiCloud website, go to Monitor -> Report where monitoring information are visible such as Traffic by Period, Client Count by Period, and more.


1 reply

New Member
June 6, 2026

Dear Spathak,

Hope you are doing great!

We have 40 units of FortiAP model FAP-231K installed and mounted at double-height locations within the building.

The challenge we are facing is that the FortiCloud keys, which are printed on the stickers attached to the access points, were not recorded prior to installation. Since the APs are already mounted and difficult to access, manually verifying the sticker labels would be time-consuming.

We would like to know if there is any alternative method to obtain the FortiCloud keys and register the devices in FortiCloud without physically accessing each access point.

Additionally: we are going to manager all the access points in the FortiGate firewall (firewall will be the controllers for all AP’s).


We would appreciate your guidance and assistance on this matter.

Looking forward to your response.

Best regards,
Vinothkumar