Technical Tip: FortiCloud-managed FortiAP WiFi

[spathak]

Description
In this example, FortiCloud is used to configure a single FortiAP-221C, creating a working WiFi network without a FortiGate.
FortiCloud remote management is supported on FortiAP models 221C and 320C.

For this configuration, the FortiAP-221C unit is running version 5.2 firmware.
Create a simple network that uses WPA-Personal authentication.

Register for a free FortiCloud account at www.forticloud.com.

To create the WiFi network without a FortiGate:
- Add the FortiAP to FortiCloud.
- Configure the SSID.
- Configure the AP platform profile.
- Deploy the AP with the profile.

This article discusses about FortiCloud-managed FortiAP WiFi.

Solution
Adding the FortiAP to FortiCloud.

It is necessary to add the FortiAP to thr FortiCloud account.
This is done through a unique key that can be found under the FortiAP.

To add a FortiAP to FortiCloud.

1) Connect the FortiAP Ethernet interface to a network that provides access to the Internet.
2) Open a web browser and navigate to the FortiCloud main page and 'select + FortiAP Network'.
3) Enter an AP Network Name and AP Password. This password is used to locally log in to the AP as the administrator. It will be set to all FortiAPs in this FortiAP network.
4) Set the correct Time Zone and select Submit.

Configuring the SSID.

Establish the SSID (network interface) for the WiFi network is necessary.

To configure the SSID.

1) Select the FortiAP just created from the home page. Add an SSID for the AP Network will be possible. In the interface, this is under Configure -> SSIDs.
2) In Access Control, enter the name of the SSID, set Authentication to WPA2-Personal, enter the Pre-shared Key, and select 'Next'.
3) In Security, enable security features as required (select from AntiVirus, Intrusion Prevention, Block Botnet, Web Access, and Application Control) and select 'Next'.
4) In Availability, make sure to leave 5 GHz enabled, configure a schedule as required, and select 'Next'.
5) Review the SSID in Preview, then select 'Apply'.

Configuring the FortiAP platform profile.

The radio portion of the FortiAP configuration is contained in the FortiAP platform profile. By default, there is a profile for each platform (FortiAP model).
The SSID needs to be specified in the profile.

To configure the FortiAP profile.

1) Go to Configure -> AP Profile and edit the AP Profile for the FortiAP model (mouse-over the AP Profile to reveal the Edit button).
2) Enable the SSID configured earlier for both Radio 1 and Radio 2, for 5GHz coverage.
Deploying the AP with the platform profile
With the SSID and platform profile configured, deploy the FortiAP by entering the FortiCloud key for the FortiAP.

To deploy the AP.

1) Go to Configure -> Deploy APsEnter the FortiCloud key will be authorized, which can be found on the same label as the FortiAP unit's serial number, and select 'Submit'.
If there is a FortiAP model that does not include a FortiCloud key, add the unit to the network. To learn how, see the FortiCloud-managed FortiAP WiFi without a key configuration.
2) In Set Platform Profiles, select the platform profile created earlier and select 'Next'.
3) Follow the rest of the deployment wizard. Select 'Submit' when completed.

Connect to the wireless network and browse the Internet will be now possible.
On the FortiCloud website, go to Monitor -> Report where monitoring information are visible such as Traffic by Period, Client Count by Period, and more.