Hello everybody.
We have a Fortigate 100D (v5.2.3) connected to 6 Forti AP (all using v5.2) and during business hours we experience the worst performance ever.
We also have a 5MB Dedicated Internet Connection (Synchronous Internet Connection) working as our WAN 1.
Let me explain a little bit better. During peak business hours we have around 70 WiFi Connections (almost all of them connected using "n" type of WiFi connection), we also have around 25 PCs connected to a Switch Extreme that is connected to one of the 100D ports. And like I said before, during peak hours we get a really bad performance out of the WiFi connection. For example: a coworker might be uploading files (via SMB) to our servers and all the WiFi connections will be affected by that traffic. Meaning that user from different APs will complain saying that their connections have become slow.
I was wondering what are common techniques used to get the best out of the Forti APs WiFi connections.
We do have web filtering enabled and common sites are blocked (youtube, facebook, twitter, xxx).
The most common type of traffic for everyday operations is SMB, FTP, Oracle http.
Please help
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
My 2cents:
- Update your Fortigate and FortiAP to latest 5.2 release
- Look at documentation about Broadcast packet suppression and Access Point Hand-off (http://docs.fortinet.com/uploaded/files/1905/fortigate-wireless-52.pdf)
- Do not let more than 20 users per AP (unless you use the AP models 3xx)
- Convert your SSID from tunnel mode to Local Bridge. On bridge mode you will need put each AP SSID on a different VLAN (tagging the AP port on switch)
- Use different VLAN for wired and Wireless LAN users
- Use the minimum SSID as possible
- Disable some Scanning features as Spectrum Analysis
- Enable Auto TX Power Control to control the AP power. Prevent an AP interference with each other. Best signal are different of Signal quality.
Regards,
Paulo Raponi
Regards, Paulo Raponi
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.