Technical Tip: How to add ESS-profile only on specific FAPs in FortiWLC.

[tkanneganti]

Description	This article describes an overview of how to create ESS-profile before adding ESS-profiles to specific AP. Adding ESS-profile to AP can be found in step 3.
Scope	FortiWLC 6.x,7.x,8.x.
Solution	Step 1: Creating a security profile can be done in the following path, Controller GUI -> Configuration -> Quick start -> Security Profile -> Select Add. Step 2: Creating ESS-profile can be done as mentioned in the document below, Page #109 --- https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/35e03dbf-ae7e-11eb-b70b-005056... *** Disable the 'New AP's Join ESS' on the ESS-profile incase if SSID need not to be broadcasted on all FAPs. Step 3: Adding ESS-profile to specific FAPs. Once the SSID is created, the below path can be followed to add SSID to specific Aps only as required. Controller GUI -> Configuration -> Wireless -> ESS -> Edit the ESS that needs to be added to specific AP alone > ESS-AP table. Under ESS-AP table remove the AP ids that the SSID's needs not to be broadcasted from and have the AP ids mapped which are needed to broadcast the SSID's from. Same for interface index as well (radios 2.4Ghz and 5Ghz). Add the radio interface as per the requirement. Alternatively the above can be achieved from FAP  as below, Controller GUI -> Configuration -> Devices -> APS -> Edit the FAP that needs to be added to specific ESS-profile -> ESS-AP table. As shown in the above screenshot, the ESS name can be the ESSID to be added and the interface index is the radios, 1 is 2.4Ghz and 2 is 5Ghz. Add both the interface index if both the radios want the SSID's to be broadcasted or any one as per the requirement. Once added, can test with a client and connect to it.