This article describes an overview of how to create ESS-profile before adding ESS-profiles to specific AP.
Adding ESS-profile to AP can be found in step 3.
Creating a security profile can be done in the following path,
Controller GUI -> Configuration -> Quick start -> Security Profile -> Select Add.
Creating ESS-profile can be done as mentioned in the document below,
Page #109 --- https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/35e03dbf-ae7e-11eb-b70b-005056...
*** Disable the 'New AP's Join ESS' on the ESS-profile incase if SSID need not to be broadcasted on all FAPs.
Adding ESS-profile to specific FAPs.
Once the SSID is created, the below path can be followed to add SSID to specific Aps only as required.
Controller GUI -> Configuration -> Wireless -> ESS -> Edit the ESS that needs to be added to specific AP alone > ESS-AP table.
Same for interface index as well (radios 2.4Ghz and 5Ghz).
Add the radio interface as per the requirement.
Alternatively the above can be achieved from FAP as below,
Controller GUI -> Configuration -> Devices -> APS -> Edit the FAP that needs to be added to specific ESS-profile -> ESS-AP table.
As shown in the above screenshot, the ESS name can be the ESSID to be added and the interface index is the radios, 1 is 2.4Ghz and 2 is 5Ghz.
Add both the interface index if both the radios want the SSID's to be broadcasted or any one as per the requirement.
Once added, can test with a client and connect to it.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.