Skip to main content
springeruk
New Member
September 6, 2016
Question

Third party Wireless access point

  • September 6, 2016
  • 2 replies
  • 29427 views

Hi all,

 

I had intended to use a low cost Netgear Wireless Access Point connected via ethernet back to my Fortiwifi60D to extend the wireless network but have and have just been told that I can only use a Fortigate product to do this. That seems almost impossible to believe as I have never had this restriction with any other firewall/router manufacturer.

 

Before I consider buying a significantly more expensive Fortigate device... Has anyone here ever used a third party wireless access point with a Fortiwifi60D (or any other Fortigate firewall/router)?

 

Thanks.

    2 replies

    tanr
    New Member
    September 6, 2016

    If the Netgear WAP is connected via ethernet I would think you should be able to use it for wifi access -- I'm planning on doing something similar by the end of the week.

     

    Caveats I've found in the docs and the forum:

    - FGT CAPWAP management of a third party WAP won't work - it's FGT specific

    - Tunnel to FGT from WAP, like FortiAPs, isn't possible

    - If Netgear WAP uses same SSID as 60D, you won't get automatic handoffs between APs, etc., plus you may have to explicitly tell the 60D that your Netgear WAP isn't a rogue AP

     

    So if you don't need the management through the FGT, or the tunnel, and if you are either using a different SSID or have the WAP far enough away from the FortiWifi I would think things would be fine.

     

    Anyone who's actually set this up want to comment?

    springeruk
    New Member
    September 6, 2016

    Thanks for your reply tanr. Yes, you'd think is would be ok wouldn't you?! And no, I don't want to manage it from the Fortinet device. However and hour on Friday and three hours today on the phone with Fortinet support (not to mention the hours of waiting around for a call!), seems to suggest otherwise.

     

    I've brought the Netgear WAP home, plugged it into an ethernet port on my home router and with no changes* whatsoever to the configuration it works immediately.

    *In fact it still has the office IP address set which is different to my home network! But that's no surprise the IP is just for management.

     

    The SSID is different to the one the Fortiwifi60D is putting out, they're far enough apart (we needed it for this deadzone coverage), but I'm still finding it hard to believe this should not work, it's as if Fortinet have deliberately locked out third party devices.

     

    Tell me more about the Rouge AP config, I wonder if I should be looking at that?

     

    Thanks.

    Bromont_FTNT
    Staff
    Staff
    September 6, 2016

    A third party AP should work just fine behind any Fortigate.... it's just another network device and not something support will be able to help with unless there's an issue with the FGT itself

    michaelbazy_FTNT
    Staff
    Staff
    September 7, 2016

    Usually, third party APs just do a WiFi to Lan conversion of the packets... However, you might have some complaints from your userse on the signal quality where the 2 signals overlap...