Skip to main content
pprince
Staff
Staff
October 21, 2024

Technical Tip: To get FortiAP online on FortiEdge cloud with static mode

  • October 21, 2024
  • 0 replies
  • 5078 views
Description

This article describes how to get FortiAP online on the FortiEdge cloud with static mode.

 

FortiAP can use six ways to discover AC controllers.

 

If the FortiAP’s discovery type is set to auto it follows the below order to discover the AC controller: 1(static) → 2(dhcp) → 3(dns) → 7(forticloud) → 5(multicast) → 6(broadcast).

 

For more information, refer to Advanced-wifi-controller-discovery

 

For FortiAP to discover the fortiEDGE cloud, set the discovery Type to 7.

 

dis.png

 

The access point can discover FortiCloud by doing a DNS lookup of the hardcoded FortiCloud AP controller hostname 'apctrl1.fortinet.com'.

 

The FortiEdge CloudAC discovery technique finds the AC info from apctl1.fortinet.com using HTTPS.

Scope FortiAP.
Solution

Due to network limitations or Firewall/ISP rules, when DNS lookup is not possible, FortiAP can come online on FortiEdge cloud with static mode. 

 

  1. Make sure the FortiAP is listed in the inventory of the FortiEdge account and deployed in the Network : 

 

Refer to this KB article for device deployments: Technical Tip: Move devices from one Domain to another Domain on FortiEdge Cloud


  1. Connect the console/SSH to the FortiAP and check if the FortiAP can reach the internet:

     

    Screenshot 2024-10-20 153925.png

     

  2. Go to FortiEdge Cloud -> Nextwork -> Access Points -> Edit View. Copy the URL of the FortiEDGE cloud where FortiAP shows offline.

     

    Picture21.png

     

  3. Perform Nslookup for the cloud URL 'nslookup eu.fortiedge.forticloud.com' in a laptop to find the public IP.

     

    URL.png

     

  4. Configure the resolved IP on the FortiAP and discovery type 1.

     

    Picture31.png

      

  5. The configuration will show up in #cfg -s.

    Picture41.png

     

  6. Run #wcfg on the FortiAP console/CLI to check the FortiAP FSM state :

     

    Picture61.png

     

  7. FortiAP status on FortiEdge Cloud:

     

    Picture51.png

 

Note:

The public IP will not be pingable from FortiAP CLI.