FMG + FGT + FAP - Change SSID Password via API regularly

Forum|Forum|1 year ago
December 21, 2024
1 reply
885 views

Hi!

We want to implement a monthly change of Guest SSID password change via API automatically. The environment is managed with FortiManager. What would be best practice in this case?

- Change the password via CLI Script on every device from FortiManager, push the CLI script via FMG API

- Change the password in SSID profile and provision via API

- Anything else?

With the first approach, I guess we will see conflicts and FMG tries to override the password during a following provisioning?

Thanks & Happy Holidays,

Tobi

Toshi_Esumi

SuperUser

I don't use either API or AP Manager on FMG. But I think it's up to if you use Central Management for FortiAP or not. If central management, the PSK is in a profile/template so it would complicate the sync process if you change PSK directly at each contoroller FGT. Probably better to change it at FMG and push.
If not central management, probably it wouldn't be a matter which API, FGT's or FMG's, you use to change PSKs altomatically.
In that case, if you change them at FGTs, the changes would be automatically synced (auto-update) with FMG, or if you change it at FMG, yes, you still need to push them to FGTs.

Toshi

Sign up

Login with SSO

Login to the community

Login with SSO