FortiAP 221E, 223E QuickStart Guide 7/10/2017 Copyright 2017 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiCare and FortiGuard, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinets General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinets internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features, or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations,and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Cautions and Warnings Environmental specifications Ambient operating temperature: 0C to 40C Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude). Rfrez la Fiche Technique de ce produit pour les caractristiques environnementales
(Temprature de fonctionnement, temprature de stockage, humidit et l'altitude). Safety Caution: This equipment is to be used in a Network Environment 0 per IECTR 62101. This product is connected only to PoE networks without routing to the outside plant. Attention: Ce matriel doit tre utilis dans un Environnement Rseau 0 par IECTR 62101. Ce produit est uniquement connect aux rseaux PoE sans installation externe de routage. QuickStart Guide Box Includes or FortiAP device QuickStart Guide Wall Mounting Hardware Antennae 4 5 GHz2.4 GHzX2 2.4 GHzX2 5 GHz(Model 223E) Before YouBegin Write down details typically provided by your network administrator or ISP. Static IPaddress IPaddress ___________________ Subnet Mask ___________________ Default Gateway ___________________ Primary/Secondary DNS ___________________ DHCP It is normal to not require a hostname, but your ISP might require it. Hostname ___________________ QuickStart Guide Video https://video.fortinet.com/video/177/
fortigate-and-fortiap 5 FortiAP 221E - Device Front 6 FortiAP 221EO: No PowerGreen: Power on andready for operationBlinking: Device bootingO: FortiGate Wireless controllerhas not been foundAmber: FortiGate Wireless controller has been found but this AP is not managedAmber Blinking: Error/Fault in connecting to FortiGate Wireless controllerGreen: This AP is being managed byFortiGate Wireless controllerLED5: PowerLED4: StatusO: Ethernet Link administratively disabled/o!Amber: 100Mbps is activeAmber Blinking: Tra"c is transmitting at 100MbpsGreen: 1000Mbps is activeGreen Blinking: Tra"c is transmitting at 1000MbpsLED3: Ethernet portO: Wireless Linkadministratively disabled/o!Green: 5GHz Wireless RadioenabledBlinking: Transmitting andreceiving dataLED1: WLAN 2 (5GHz)O: Wireless Link administratively disabled/o!Green: 2.4GHz Wireless Radio enabledBlinking: Transmitting and receiving dataLED2: WLAN 1 (2.4GHz) FortiAP 223E - Device Front 7 FortiAP 223EO: No PowerGreen: Power on andready for operationBlinking: Device bootingO: FortiGate Wireless controllerhas not been foundAmber: FortiGate Wireless controller has been found but this AP is not managedAmber Blinking: Error/Fault in connecting to FortiGate Wireless controllerGreen: This AP is being managed byFortiGate Wireless controllerLED5: PowerLED4: StatusO: Ethernet Link administratively disabled/o!Amber: 100Mbps is activeAmber Blinking: Tra"c is transmitting at 100MbpsGreen: 1000Mbps is activeGreen Blinking: Tra"c is transmitting at 1000MbpsLED3: Ethernet portO: Wireless Linkadministratively disabled/o!Green: 5GHz Wireless RadioenabledBlinking: Transmitting andreceiving dataLED1: WLAN 2 (5GHz)O: Wireless Link administratively disabled/o!Green: 2.4GHz Wireless Radio enabledBlinking: Transmitting and receiving dataLED2: WLAN 1 (2.4GHz) FortiAP 221E - Device Rear FortiAP 223E - Device Rear 8 LAN/PoEPower connectionfor optional poweradapter.12V DC,center positive.LAN/PoEPower connectionfor optional poweradapter.12V DC,center positive.5.0 GHzAntenna5.0 GHzAntenna2.4 GHzAntenna2.4 GHzAntenna Installation 9 lockunlock The unit can be mounted on a wall or ceiling using the mounting hardware provided. The electrical wall box must be pre-installed. 10 or Basic Connection Connect the FortiAP device to a FortiGate controller or an Internet connection. Ensure that the Power over Ethernet (PoE) cable is connected to an applicable port on your FortiGate device or PoE injector. Caution: Adequate grounding must be provided to the FortiAP unit and the PoE injector, in compliance with your local electrical code or regulations. Warning: This device complies with IEEE 802.3af PoE specification. Do not use any PoE injectors that are not IEEE 802.3af compliant as they may damage your device. 11 WAN/POENetwork Core/FortiGate FortiAPSetup Deployment through a FortiGate Ensure that you are running the Fortinet recommended version of software. Please check support.fortinet.com for more information. If FortiGate is on the same network as the FortiAP:
1. Use FortiGate to preauthorize the FortiAP device. 2. Refer to the Access Point Deployment section of the FortiWiFiand FortiAP Configuration Guide found at http://forti.net/ap-docs. 3. Plug the FortiAP into your local Ethernet connection. The FortiAP will self-
configure. Or 1. Instead of preauthorizing, you can use the FortiGate to authorize the FortiAP device after you have connected the FortiAP to the network. 2. Within two minutes of connecting the FortiAP to the FortiGate, the device appears on the Managed FortiAP page in the Web-based Manager:
authorize and assign a profile to the device. 12 If FortiGate is not on the same network as the FortiAP:
1. Log into FortiAP directly (IP address: 192.168.1.2) with username admin and no password, and specify the IP address of the controlling FortiGate. 2. Connect to FortiAP via the CLI using the instructions in the Connecting to FortiAP CLI section of the FortiWiFi and FortiAPConfiguration guide. 3. Specify the IP address of the controlling FortiGate:
cfg -a AC_IPADDR_1=0.0.0.0 cfg -c where 0.0.0.0 is the address of the FortiGate. 4. The FortiAP device connects to FortiGate, and then you can authorize the FortiAP. 13 Cautions and Warnings Environmental specifications Ambient operating temperature: 0C to 40C Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude) Rfrez la Fiche Technique de ce produit pour les caractristiques environnementales (Temprature de fonctionnement, temprature de stockage, humidit et l'altitude). Safety Battery Risk of explosion if the battery is replaced by an incorrect type. Do not dispose of batteries in a fire. They may explode. Dispose of used batteries according to your local regulations. IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to batteries. Batterie Risque d'explosion si la batterie est remplace par un type incorrect. Ne jetez pas les batteries au feu. Ils peuvent exploser. Jetez les piles usages conformment aux rglementations locales. IMPORTANT: Suisse: l'annexe 4.10 de SR814.013 sappliquent aux batteries. Caution: This equipment is to be used in a Network Environment 0 per IECTR 62101. This product is connected only to PoE networks without routing to the outside plant. Attention: Ce matriel doit tre utilis dans un Environnement Rseau 0 par IECTR 62101. Ce produit est uniquement connect aux rseaux PoE sans installation externe de routage. This product is intended to be supplied by a Listed Direct Plug-In Power Unit marked LPS or Class 2 and rated 12 Vdc, 2A or by 54 Vdc from PoE source. 14 Le produit doit tre aliment par un bloc d'alimentation courant continu homologu UL de 12 Vdc, 2A nominal marqu LPS ou Class 2 ou par une source dalimentation par Ethernet de 48 Vdc (PoE). Regulatory Notices Federal Communication Commission (FCC) USA This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received; including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in residential installation. This equipment generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. WARNING: Any changes or modifications to this unit not expressly approved by the party responsible for compliance could void the users authority to operate the equipment 15 This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. Caution: Operation of this device is restricted to indoor use only. For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor environment. This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules. Industry Canada Equipment Standard for Digital Equipment (ICES) Canada This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numrique de la classe B est conforme la norme NMB-003 du Canada. Innovation, Science and Economic Development (ISED) Canada This device complies with ISED license-exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. Le prsent appareil est conforme aux CNR d' ISED applicables aux appareils radio exempts de licence. L'exploitation est autorise aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible d'en compromettre le fonctionnement. For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of other channels is not possible. Pour les produits disponibles aux tats-Unis / Canada du march, seul le canal 1 11 peuvent tre exploits. Slection d'autres canaux n'est pas possible. 16 This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 23cm between the radiator &
your body. Cet quipement est conforme aux limites d'exposition aux rayonnements ISED tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 23cm de distance entre la source de rayonnement et votre corps. The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate. Le gain maximal dantenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz) doit se conformer la limite de p.i.r.e. spcifie pour lexploitation point point et non point point, selon le cas. Caution: The device for the band 5150-5250 MHz is only for indoor usage to reduce potential for harmful interference to co-channel mobile satellite systems. High-power radars are allocated as primary users (i.e. priority users) of the bands 5250-5350 MHz and 5650-5850 MHz and that these radars could cause interference and/or damage to LE-LAN devices. Attention: Le dispositif de la bande 5150-5250 MHz est rserv un usage intrieur afin de rduire l'interfrence nuisible potentielle aux systmes mobiles par satellite co-canal. Les radars haute puissance sont dsigns comme utilisateurs principaux ( savoir les utilisateurs prioritaires) des bandes 5250-5350 MHz et 5650-5850 MHz et que ces radars pourraient causer des interfrences et /
ou endommager les priphriques LE-LAN This device has been designed to operate with an antenna having a maximum gain of 4.58 dBi for 2.4GHz and 5.6 dBi for 5GHz. Antenna having a higher gain is strictly prohibited per regulations of ISED. The required antenna impedance is 50 ohms. Under ISED regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio interference 17 to other users, the antenna type and its gain should be so chosen that the equivalent isotopically radiated power (e.i.r.p.) is not more than that necessary for successful communication. Ce dispositif a t conu pour fonctionner avec une antenne ayant un gain maximal de 4.58 dBi pour 2,4 GHz et 5.6 dBi pour 5GHz. Une antenne ayant un gain suprieur sont strictement interdites par la rglementation d'ISED. L'impdance d'antenne requise est de 50 ohms. Conformment la rglementation d'ISED, cet metteur radio peut fonctionner seulement avec une antenne dun type et d'un gain maximal (ou infrieur) approuv pour l'metteur par ISED. Dans le but de rduire les risques de brouillage radiolectrique aux autres utilisateurs, il faut choisir le type d'antenne et son gain de sorte que la puissance isotrope rayonne quivalente (p.i.r.e.) ne dpasse pas l'intensit ncessaire l'tablissement d'une communication russie. This radio transmitter (IC: 7280B-140701) has been approved by ISED to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Le prsent metteur radio (IC: 7280B-140701) a t approuv par ISED pour fonctionner avec les types d'antenne numrs ci-dessous et ayant un gain admissible maximal et l'impdance requise pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le gain est suprieur au gain maximal indiqu, sont strictement interdits pour l'exploitation de l'metteur. This device and it's antennas(s) must not be co-located or operating in conjunction with any other antenna or transmitter except in accordance with IC multi-transmitter product procedures. Cet appareil et son antenne (s) ne doit pas tre co-localiss ou fonctionnement en association avec une autre antenne ou transmetteur. 18 Brand Holder Senao Networks, Inc Senao Networks, Inc Senao Networks, Inc Senao Networks, Inc Brand Holder Senao Networks, Inc Senao Networks, Inc Quantity Antenna Type Connector Gain (dBi) 2.4GHz 5GHz Internal antenna model 1 1 1 1 Printed Printed Printed Printed IPEX IPEX IPEX IPEX 4.5 4.5
-
-
-
-
5.6 5.6 Quantity Antenna Type Connector Gain (dBi) 2.4GHz 5GHz External antenna model Dipole RPSMAPlug 4.58
-
Dipole RPSMAPlug
-
5.35 2 2 19 European Conformity (CE) - EU This is a Class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. The product transmits within the frequency ranges and less than or equal to the power listed below:
2412-2472MHz less than 20dBm 5180-5240MHz less than 23dBm 5260-5320MHz less than 23dBm *
5500-5700MHz less than 30dBm *
Note: * Only with DFS bands certification. 20 Fortinet Customer Service & Support Create a support account, register and manage your products, download updates, firmware images and release notes, and create technical support tickets. https://support.fortinet.com Fortinet Document Library Up-to-date versions of Fortinet publications for the entire family of Fortinet products. http://docs.fortinet.com Training Services Course descriptions, availability, schedules, and location of training programs in your area. http://www.fortinet.com/training Technical Discussion Forums Communicate with other customers and Fortinet partners about Fortinet products, services, and configuration issues. https://support.fortinet.com/forum FortiGuard Threat Research and Response Up-to-date information on vulnerabilities and threats, includes a virus scanner, IP signature look-up, and web filtering tools. http://www.fortiguard.com Fortinet.com