Hot!Country/Region Mismatch under managed APs since upgrading to 6.2.2.

Author
James_G
Gold Member
  • Total Posts : 233
  • Scores: 9
  • Reward points: 0
  • Joined: 2016/02/28 02:55:47
  • Status: offline
2019/11/04 08:25:56 (permalink) 6.0
0

Country/Region Mismatch under managed APs since upgrading to 6.2.2.

Since upgrading to FortiOS 6.2.2 on 80D I get "Country/Region Mismatch" warning under managed FortiAP.

I am trying to set everything to GB, to that end I have changed config wireless-controller setting to "set country GB", and I have changed the FortiAP profile to "set ap-country GB" - this is on the FAP321C UK profile, but I still get the mismatch warning. Am I missing anything else, do I need to set GB elsewhere in config? Extract from my config below:
 
 
config wireless-controller setting
set country GB
set darrp-optimize-schedules "default-darrp-optimize"
end
 
config wireless-controller wtp-profile
edit "FAP321C UK"
config platform
set type 321C
end
set handoff-sta-thresh 30
set ap-country GB
config radio-1
set band 802.11n
set frequency-handoff enable
set ap-handoff enable
set vap-all disable
set vaps "dsfeswfre" "wfewfew" "wfewfewg"
set channel "1" "6" "11"
end
config radio-2
set band 802.11ac
set vap-all disable
set vaps "dsfeswfre" "wfewfew" "wfewfewg"
set channel "36" "40" "44" "48"
end
next
end
#1

15 Replies Related Threads

    Dave Hall
    Expert Member
    • Total Posts : 1711
    • Scores: 174
    • Reward points: 0
    • Joined: 2012/05/11 07:55:58
    • Location: Canada
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2019/11/04 11:05:59 (permalink)
    0
    Confirm that the AP profiles in question are actually being used and/or referenced to.   During the firmware upgrade process, AP profiles may need to undergo a script conversion process that might result in a new profile name being tied to the AP(s) in question. 
     
     

    NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
    #2
    James_G
    Gold Member
    • Total Posts : 233
    • Scores: 9
    • Reward points: 0
    • Joined: 2016/02/28 02:55:47
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2019/11/04 12:53:13 (permalink)
    0
    Yes the profile is linked to the ap, and I created a new profile to check if that helped.
    #3
    Dave Hall
    Expert Member
    • Total Posts : 1711
    • Scores: 174
    • Reward points: 0
    • Joined: 2012/05/11 07:55:58
    • Location: Canada
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2019/11/04 13:24:55 (permalink)
    0
    If you have configs saved on the 80D, if possible do a diff compare between the last know good configuration vs the current one - see what has changed. 
     
    Also, certain page elements do not render well in al web browsers, so try making the changes in difference browsers.

    NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
    #4
    yzhang_FTNT
    optimizzz
    • Total Posts : 70
    • Scores: 2
    • Reward points: 0
    • Joined: 2010/12/20 11:05:05
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2019/11/04 13:28:02 (permalink)
    0
    What's the AP's RegCode? It can be checked with command fap-get-status from the AP's shell.
    #5
    dsghi
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/07/18 17:15:00
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2019/11/14 22:21:27 (permalink)
    0
    I have the same situation happening with a FortiGate 61E and a FC24JE - It's managed and the default setting on the FortiGate wireless controller is United States. But health check shows poor, and the details say: US Country/Region Mismatch ... I assume it's a bug, so I'm going to open a ticket and see where this goes. It's not creating a problem, just annoying to see errors in the GUI... lol
    #6
    James_G
    Gold Member
    • Total Posts : 233
    • Scores: 9
    • Reward points: 0
    • Joined: 2016/02/28 02:55:47
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2019/11/15 04:29:55 (permalink)
    0
    Found this is because some of my older AP's have been shipped as US config, must be a legacy issue.
     
    I connected to the AP via SSH and ran fap-get-status - this shows the AP is US region locked. To resolve this I changed the region in the AP profile to US and warning disappeared.
     
    I can live with this, my newer access points all seem to be correctly configured to EU / GB.
    #7
    dsghi
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Joined: 2016/07/18 17:15:00
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2019/11/15 08:35:50 (permalink)
    0
    Ahh interesting, thanks for the reply. I must have the opposite situation, lol. Guess I've never ever paid attention to the country of the AP prior to this showing up as an alert. :)
    #8
    ede_pfau
    Expert Member
    • Total Posts : 6350
    • Scores: 537
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2019/11/17 02:21:22 (permalink)
    0
    I would not igore an r/c conflict between controller and AP.
    Reason is that these settings control which channels may be used, the output power etc. which all are subject to official, national or regional, regulation (law). Otherwise, e.g. broadcasting on US frequencies if located in EU may severely interrupt public services rightfully assigned to them, like police, fire brigade, RADAR/flight control or even DECT. Won't matter much to you, your WiFi will indeed work, but wireless is not confined to any site. Let's be thankful that there is some regulation on this subject.
     
    Give support a call (web chat) and ask to reset the r/c settings. Kind of this stuff happended to me last week. In my case, using EU APs, I had successfully set the controller to region "AT" - but it didn't 'take'. You could see the setting but the controller wouldn't use the APs.
    Support set the region to 'US', using a CLI command which needs a password (not disclosed), and back to 'International'. Then we were able to reselect the country code, and everything was shiny.

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #9
    James_G
    Gold Member
    • Total Posts : 233
    • Scores: 9
    • Reward points: 0
    • Joined: 2016/02/28 02:55:47
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2019/11/17 06:55:42 (permalink)
    0
    Ede,
     
    I've manually restricted the available channels on the ap profile, so I'm good, no laws broken here :)
     
    it's only one site that must have received a questionable batch (although source is a Fortinet partner).
     
    Now I know I can live with this one.
    #10
    rms2018
    New Member
    • Total Posts : 4
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/01/07 11:55:43
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2020/03/06 15:29:24 (permalink)
    0
    Hi Ede,
     
    I am having the same issue with a FAP-423E, it's showing Vietnam as a RegCode.  I've spoken to support and they are not able to help me reset it. Your prior response stated that support used a password protected CLI command to do this.  Can you elaborate a bit more on that?  Any info that you can provide would be really appreciated.  I have 3 APs that are all having this issue and I really don't want to trash them.  They were purchased over a year ago and I didn't realize that they were running on the wrong country code until recently.  Thanks!!
    #11
    ede_pfau
    Expert Member
    • Total Posts : 6350
    • Scores: 537
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2020/03/07 05:15:07 (permalink)
    0
    As I've posted then, I opened a support call (via web chat to keep it simple) for this. The friendly guy at the other end first changed the region setting to "US" and then back to "International". That did the trick. I was able to set the correct region setting afterwards.
    I could not flip this setting myself as it requires a password, input on the CLI. (So somehow support needs to get access to the AP's CLI).
     
    You may refer the supporter to this post as proof that this procedure exists.

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #12
    rms2018
    New Member
    • Total Posts : 4
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/01/07 11:55:43
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2020/04/17 11:18:24 (permalink)
    0
    Hi, I've tried that and referenced the ticket and support wasn't able to help out.  I am not sure what the command is that allows for this via the CLI and I was hoping support would be able to investigate this forum and look into the case to figure it out but they didn't do so.  I've ended up with 3 FortiAP 423-E that I can't use, they're now sitting in their boxes.  It's too bad support can't help me with this.  I will try again but I am doubtful that they will help.  Thanks again!
    #13
    Admin_FTNT
    Administrator
    • Total Posts : 92
    • Scores: 6
    • Reward points: 0
    • Joined: 2003/11/28 00:00:00
    • Status: online
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2020/06/11 04:03:50 (permalink)
    0
    There is a recent Knowledge Base article "Technical Note: Region code mismatch on FortiAP" which describes the steps to take if you have a mismatched country and region.
    #14
    James_G
    Gold Member
    • Total Posts : 233
    • Scores: 9
    • Reward points: 0
    • Joined: 2016/02/28 02:55:47
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2020/06/11 05:18:53 (permalink)
    0
    Admin_FTNT
    There is a recent Knowledge Base article "Technical Note: Region code mismatch on FortiAP" which describes the steps to take if you have a mismatched country and region.




    The units I had issues with are 5 years old, but still under support, should I go back to the original reseller, as I didn't notice issue until 6.2 was released and made the issue visible?
    #15
    James_G
    Gold Member
    • Total Posts : 233
    • Scores: 9
    • Reward points: 0
    • Joined: 2016/02/28 02:55:47
    • Status: offline
    Re: Country/Region Mismatch under managed APs since upgrading to 6.2.2. 2020/06/11 08:53:55 (permalink)
    0
    I have spoken to re-seller, who will take up with distributor, who will take up with Fortinet
     
    Possibly I will get some replacements for 4 year old AP's for free??!?!
    #16
    Jump to:
    © 2020 APG vNext Commercial Version 5.5