Connecting a FortiAP to FortiSASE using alternative connection methods

You can connect a FortiAP to FortiSASE using alternative connection methods, namely, using the FortiAP GUI or CLI.

For ease of configuration, following Connecting a FortiAP to FortiSASE using FortiZTP is recommended. As a reference, this section describes alternative connection methods other than using FortiZTP.

Before using the FortiAP GUI or CLI steps, you must obtain the FortiSASE domain name from FortiSASE.

To obtain the FortiSASE domain name from FortiSASE:

1. Go to Configuration > VPN User SSO.
2. View the URL in the Base URL field and note the FortiSASE domain name after the https:// string. In the example, the FortiSASE domain name is turbo-a1p0hv3p.edge.prod.fortisase.com.

   

To connect a FortiAP to FortiSASE via the GUI:

1. Log in to the FortiAP GUI.

2. Go to Settings > Local Configuration.

3. For AC Discovery Type, select DNS.
4. For AC Host Name 1, copy and paste the FortiSASE domain name that you obtained.
5. Click OK.
6. If you are using FortiAP Configuration mode, do the following:
   1. To exit this mode, go to the admin menu at the top-right corner and click Reboot.
   2. Click Yes. Configuration changes take effect after the FortiAP reboots.
7. Connect the FortiAP port to a wired network with internet access. The FortiAP connects to FortiSASE using the domain name configured.

To connect a FortiAP to FortiSASE via the CLI:

1. Connect to FortiAP by starting one of the following:
   1. SSH session with the FortiAP IP address
   2. Console session if your FortiAP has a console port
2. Log in to the FortiAP CLI.
3. Enter these configuration commands:

   cfg -a AC_DISCOVERY_TYPE=3
   cfg -a AC_HOSTNAME_1=<FortiSASE domain name>
   cfg -c
   

4. If you are using FortiAP Configuration mode, enter reboot to exit this mode. Configuration changes take effect after the FortiAP reboots.
5. Connect the FortiAP port to a wired network with internet access. The FortiAP connects to FortiSASE using the domain name configured.