FortiAP FP221E - Multiple Errors

8 replies
646 views

We have a FortiGate FGT60E 7.4.11 build2878 controlling three FortiAP’s FP221E 7.2-build 0337. Two of the three AP’s appear to be working fine. One of the AP’s seems to always have 0 Clients. This AP's Last Failure Reason is: 80211 WLAN ADD error. This AP also has other errors including:

oper-txpower
config-txpower
Physical AP join
Physical AP radio operation country

I ran the following but the name is blank and no country is listed:

get wireless-controller global
name :
location :
acd-process-count : 0
wpad-process-count : 0
image-download : enable
rolling-wtp-upgrade : disable
rolling-wtp-upgrade-threshold: -80
max-retransmit : 3
control-message-offload: ebp-frame aeroscout-tag ap-list sta-list sta-cap-list stats aeroscout-mu sta-health spectral-analysis
data-ethernet-II : enable
link-aggregation : disable
mesh-eth-type : 8755
fiapp-eth-type : 5252
discovery-mc-addr : 224.0.1.140
max-clients : 0
rogue-scan-mac-adjacency: 7
ipsec-base-ip : 169.254.0.1
wtp-share : disable
tunnel-mode : compatible
nac-interval : 120
ap-log-server : disable
max-sta-cap : 0
max-sta-cap-wtp : 8
max-rogue-ap : 0
max-rogue-ap-wtp : 16
max-rogue-sta : 0
max-ble-device : 0

Any suggestions concerning what can be done about this AP?

FortiAP

jiahoong112

Staff

does this fortiap appear in the fortigate wireless-controller and is it Up?

https://community.fortinet.com/t5/FortiGate/Technical-Guide-FortiGate-Wireless-Controller-to-FortiAP/ta-p/398529 You may find this document useful. It seems like your FortiAP capwap connection with FortiGate wireless-controller may not be up

SecurityPlusAuthor

Explorer III

Yes, the FortiAP does appear in the FortiGate. It and the other two FortiAP's have been under management by the FortiGate since new. What appears unusual is that this AP lists the Last Failure Reason: 80211 WLAN ADD. Also, it does not have any clients, while the nearby other AP's have 10 to 20 clients each. Also, the other error messages in the logs for this AP.

SecurityPlusAuthor

Explorer III

Good question. Only affecting one of three AP's of the same model, same firmware, in the same network, configured in the same manor.

jiahoong112

Staff

The “80211 WLAN ADD error” occurs when a FortiAP fails to properly establish or register a wireless interface or virtual AP (VAP) with its controller (FortiGate). This error originates in the 802.11 management process—specifically when the AP attempts to add a WLAN context but cannot complete the operation successfully.

Common symptoms include loss of WLAN availability, wireless client disconnections, or repeated ADD/DEL log entries in FortiGate or FortiAP logs.

SecurityPlusAuthor

Explorer III

Thank you for this information. I will check the switch cable diagnostics to help verify if there is an Ethernet cable issue.

Are any of the other 4 errors relevant or informative? Is the get wireless-controller global lack of country of any help?

jiahoong112

Staff

Those information will be filled especially the country of operation when a successful capwap connection between fortiap and fortigate has been established. A successful capwap connection is the most important first step.
Kindly refer here to start: https://docs.fortinet.com/document/fortiap/7.6.5/fortiwifi-and-fortiap-configuration-guide/252439/configuring-the-fortigate-interface-to-manage-fortiap-units

SecurityPlusAuthor

Explorer III

CapWap (Security Fabric Connection) is on on the interface, the same interface which is also used via a switch for the other FortiAP's. Neither of the radio lights is On, only the power and the activity light (flashing). I used a different Ethernet cable but no change. With the remaining AP's rebooting the troublesome AP will not pick up any clients.

jiahoong112

Staff

is this happening to all your FortiAPs or only 1 specific AP? Just want to rule out if what you're facing is a hardware issue or not

Sign up

Login with SSO

Login to the community

Login with SSO