FortiAP 224D only getting 20-30mbps

[Jedi_Master]

Hello, 

I am running a FortiGate 60E->FortiSwitch 108D->FortiAP 224D. My current ISP is Spectrum, where I get 200mbps down. 

I have tested with being connected directly to the FortiGate and the FortiSwitch, where I am getting between 170 and 190 down, but when I am connected to the FortiAP, I am lucky to get 30. I have tested with only 1 device connected, low CPU and Memory usage on the AP, low channel utilization, and confirmed that there were 0 interfering APs at the time of the test. I checked the datasheet, and it is supposed to go up to 300mbps. 

I have disabled all UTM features as part of troubleshooting. I have confirmed low speeds occur on both a bridged and a tunneled SSID. 

[abelio]

Hi,

did you enable DTLS ?

you could check that with, for example:

show full wireless-controller wtp-profile | grep dtls

[Jedi_Master]

DTLS is not enabled: 

show full wireless-controller wtp-profile | grep dtls

set dtls-policy clear-text

[alex_buric]

please share wireless section config

[Jedi_Master]

JediTemple (FAP224D-default) # show full config wireless-controller wtp-profile edit "FAP224D-default" set comment '' config platform set type 224D end set control-message-offload ebp-frame aeroscout-tag ap-list sta-list sta-cap-list stats aeroscout-mu sta-health set led-state enable set dtls-policy clear-text set max-clients 0 set handoff-rssi 25 set handoff-sta-thresh 30 set handoff-roaming enable set ap-country US set ip-fragment-preventing tcp-mss-adjust set tun-mtu-uplink 0 set tun-mtu-downlink 0 set split-tunneling-acl-path local set split-tunneling-acl-local-ap-subnet disable set allowaccess https set login-passwd-change default set lldp disable config radio-1 set mode ap set band 802.11n-5G unset powersave-optimize set transmit-optimize power-save aggr-limit retry-limit send-bar set amsdu enable set coexistence enable set short-guard-interval enable set channel-bonding 40MHz set auto-power-level disable set power-level 100 set dtim 1 set beacon-interval 100 set rts-threshold 2346 set channel-utilization enable set spectrum-analysis disable set wids-profile '' set darrp enable set max-clients 0 set max-distance 0 set frequency-handoff enable set ap-handoff disable set vap-all disable set vaps "WiFi" set channel "36" "44" "149" "157" set call-admission-control disable end config radio-2 set mode ap set band 802.11n set protection-mode disable unset powersave-optimize set transmit-optimize power-save aggr-limit retry-limit send-bar set amsdu enable set coexistence enable set short-guard-interval enable set channel-bonding 20MHz set auto-power-level disable set power-level 100 set dtim 1 set beacon-interval 100 set rts-threshold 2346 set channel-utilization enable set spectrum-analysis disable set wids-profile '' set darrp enable set max-clients 0 set max-distance 0 set frequency-handoff enable set ap-handoff disable set vap-all disable set vaps "WiFi-2.4" set channel "1" "6" "11" set call-admission-control disable end config lbs set ekahau-blink-mode disable set aeroscout disable set fortipresence disable set station-locate disable end set ext-info-enable disable next end

[TheJaeene]

Are you using PMF´s on the SSID?

config wireless-controller vap edit "SSID1" set pmf enable

If yes, give it a try and disable it.

I once had similar thougput speeds when PMF was enabled with some Client HW (Intel Wifi NIC, Macbooks)

Regards,

Jan