This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.
We're working on a project in a K-12 school system to expand wireless coverage. We currently have roughly 1 AP per every 2 classrooms. Some schools have AP1020's and some have AP832's. We will soon have 1 AP per classroom and several in the common areas (libraries, cafeterias, etc). We are 1:1 with Chromebooks, so classrooms could have 20-25 Chromebooks along with personal devices on our guest network.
What are some general recommendations for setting the power for both 2.4 and 5 radios, assuming that any device will be within 20-30 feet and line-of-site of an AP? Also, since we no longer have "B" clients, what speeds should we look at shutting down now? Should we also start shutting down some of the lower "G" speeds since any client should be capable of hitting the higher speeds if an AP is nearby?
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello Jason,
Here are some recommendations for you based on your design requirements:
You could also consider segregating traffic per band. For instance, have school issued Chromebooks and Staff devices on 5GHz and have guest devices on 2.4GHz. If you have any further questions please let us know.
Matt Swanson
System Engineer
Fortinet
720-509-9868 | c: 763-639-3185
Hello Jason,
Here are some recommendations for you based on your design requirements:
You could also consider segregating traffic per band. For instance, have school issued Chromebooks and Staff devices on 5GHz and have guest devices on 2.4GHz. If you have any further questions please let us know.
Matt Swanson
System Engineer
Fortinet
720-509-9868 | c: 763-639-3185
So, to disable the slow speeds, I just go in on each ESS and uncheck 1, 2, 5.5, 6, 9, MCS0, MCS8, and MCS16 anywhere they appear under Advanced? I wish it was a little simpler like some other brands. It would be nice if the RF Band setting would let you just select 802.11gn instead of 802.11bgn and do it for you.
Hi Jason,
Yes, you need to trim the lower MCS base rates on a per ESS basis if you don't want client connections at the lower speeds. The Beacons for each ESS are sent out at the lowest rate and therefore clients can only connect at the advertised rate or higher.
Note that if this is done, any clients sitting on the edge of the WLAN's range will not be able to rate adapt down any lower than the minimum you set and therefore you will likely see an increase in the retries for unacknowledged frames.
Just adding that you "only" need to modify the section that corrosponds to the setting of the radio, that's using the ESS profile.
Meaning that if only have radios for 2,4 set to bgn mode, then no need to change settings for b and g sections only for bgn section of the rates.
Thanks
Brian
Regards
Brian, at Fortinet
Thanks guys. I made the change last night at one site and no complaints today.
Thanks for the info. I also sent Alan an e-mail.
Hi Jason,
Just to add another point, if you have a mixture of AP1020's and AP832's then you should try and physically group them together so that site/area A has the AP1020's and site/area B has the AP832's.
The reason for this is that the Virtual Cell technology which creates a common BSSID has a requirement that the radio hardware matches. If it doesn't and different radios (or radio settings) do not match inside a given ESS profile, then you will end up with broken/multiple BSSID's in the air; resulting sub optimal performance (for a number of reasons).
Best Regards,
Mark
The models are at different locations.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.