Created on 03-29-2022 10:36 PM Edited on 11-07-2024 07:24 AM By Stephen_G
Description | This article describes debug commands and other tips to use when troubleshooting managed FortiAP issues on the FortiGate side. |
Scope | FortiGate, FortiAP. |
Solution |
Configuration.
Capture and review the interface, DHCP, NTP, and DNS config.
show full system interfac show full system dhcp serve show full system ntp show full system dns Crashlog and Other Wireless Controller Status.
FortiGate crash logs (check for cw_acd, wpad_ac, cw_wtpd, cw_stad processes crashing).
diagnose debug crashlog read
This command shows the equivalent of what is shown in the wifi monitor GUI but on CLI:
diag wireless-controller wlac -d st
The following command shows a list of FortiAPs that are managed by FortiGate. It shows WTP ID which can be used to see which peripheral unit is connected to which physical FortiAP.
diag wireless-controller wlac -d wtp
This command is similar to exec tac report but for FortiAP, in case something is missed during the remote session.
diag wireless-controller wlac show all
Real-time Debug:
The following real-time debug commands should be captured simultaneously in separate CLI windows/log files:
CLI session #1.
Replace portX with the FortiGate port that the FortiAP is connected to and capture the CAPWAP management, DHCP, and ARP packets.
CLI session #2.
To disable debug.
diagnose debug disable
|
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.
If the FortiGate port with CAPWAP enabled is anything other than the default IP, then it will be necessary to manually configure the AC_IPADDR (wireless controller IP address) in each FortiAP.
Details about FortiAP Controller Discovery methods:
Advanced WiFi controller discovery
Disable and re-enable POE on the switchport and check FortiAP status again.
config switch physical-port
edit <port>
set poe-status {enable | disable}
end
Configuring power over ethernet on a port - FortiSwitch.
Related documents:
Technical Note: How to connect to FortiAP 5.4 from wireless controller using telnet, http, https, ss...https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/801107/wifi-network-troubleshooting
Technical Tip: FortiAP troubleshooting