FortiOS Handbook - Deploying Wireless Networks

What’s new in FortiOS 5.4
GUI support for WiFi SSID schedules (276425 269695 269668 )
WiFi SSIDs include a schedule that determines when the WiFi network is available. The default schedule is
Always. You can choose any schedule (but not schedule group) that is defined in Policy & Objects > Objects >
Schedules.
CLI Syntax
config wireless-controller vap
edit vap-name
set schedule always
end
The WiFi SSID list includes a Schedule column.
SSID Groups
An SSID Group has SSIDs as members and can be specified in any field that accepts an SSID.
To create an SSID Group in the GUI, go to WiFi Controller > SSID and select Create New > SSID Group. Give
the group a Name and choose Members (SSIDs, but not SSID Groups).
To create an SSID Group in the CLI:
config wireless-controller vap-group
edit vap-group-name
set vaps "ssid1" "ssid2"
end
RADIUS Change of Authorization (CoA) support
The CoA feature enables the FortiGate to receive a client disconnect message from the RADIUS server. This is
used to disconnect clients when their time, credit or bandwidth had been used up. Enable this on the RADIUS
server using the CLI:
config user radius
edit
set radius-coa enable
end
CAPWAP offloading to NPU
On FortiGates with the NP6 processor, offloading of CAPWAP traffic to the NP6 is enabled by default.
Administrative access to managed FortiAPs
By default, telnet access to a FortiAP unit's internal configuration is disabled when the FortiAP is managed (has
been authorized) by a FortiGate. You can enable administrative access in the FortiAP profile, like this:
config wireless-controller wtp-profile
edit FAP321C-default
set allowaccess telnet
end
20 Deploying Wireless Networks for FortiOS 5.4
Fortinet Technologies Inc.