Fortinet FortiAP-C24JE User manual

FortiAP-C24JE
QuickStart Guide

11/15/2017
Copyright© 2017 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
FortiCare® and FortiGuard®, and certain other marks are registered trademarks of
Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may
also be registered and/or common law trademarks of Fortinet. All other product or
company names may be trademarks of their respective owners. Performance and
other metrics contained herein were attained in internal lab tests under ideal conditions,
and actual performance and other results may vary. Network variables, different network
environments and other conditions may affect performance results. Nothing herein
represents any binding commitment by Fortinet, and Fortinet disclaims all warranties,
whether express or implied, except to the extent Fortinet enters a binding written contract,
signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the
identified product will perform according to certain expressly-identified performance metrics
and, in such event, only the specific performance metrics expressly identified in such binding
written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be
limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. In no
event does Fortinet make any commitment related to future deliverables, features, or
development, and circumstances may change such that any forward-looking statements
herein are not accurate. Fortinet disclaims in full any covenants, representations,and
guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to
change, modify, transfer, or otherwise revise this publication without notice, and the most
current version of the publication shall be applicable.
QuickStart Guide

Register for Support
Register your Fortinet product to receive:
lTechnical Support
lNew product features
lProtection from new threats
Vous devez enregistrer le produit pour recevoir:
lSupport technique
lNouvelles fonctionnalitées du produit
lProtection contre de nouvelles menaces
La reistrazione ti permette di usufruire di:
lSupporto Tecnico
lNuove funzionalita
lProteezione dalle ultime minaccce
Debe registrar el producto para recibir:
lApoyo técnico
lNuevas funcionalidades del producto
lProtección contra ataques
登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート•新機能の追加 •新しい脅威への防御
QuickStart Guide

请马上注册
您的飞塔产品
您在注册以后才能得到技术支持、新产品特点信息、最
新威胁防护
https://support.fortinet.com
Toll free: 1 866 648 4638
Phone: [phone]
Fax: [phone]
Email: [e-mail]

5
Box Includes
FortiAP device QuickStart Guide
Mounting
plate
1 Security Torx
+1 Philips screw
4 screws 4 screw
anchors
QuickStart Guide Video
https://video.fortinet.com/video/177/
fortigate-and-fortiap

6
Before YouBegin
Write down details typically provided by your network
administrator or ISP.
Static IPaddress
IPaddress ___________________
Subnet Mask ___________________
Default Gateway ___________________
Primary/Secondary DNS ___________________
DHCP
It is normal to not require a hostname, but your ISP
might require it.
Hostname ___________________

Devi ce Gui de
Off: No PSE output
On: PSE output (max 4W)
Flashing: PSE load over limit
4: PSE LED
Reset button
Off: Not connected
On: Connected
Flashing: Activity
1,2, and 3:
LAN1/2/3 LED
FAP-C24JE
Off: No power
On: Normal
Flashing: Boot up
SYS LED
Off: Not connected
On: Connected
Flashing: Activity
WAN LED
WiFi LED
Off: Radio disabled or off
Green:Radio is enabled
Flashing Green:Wireless activity
Press and hold for less than 10
seconds: Reboot
Press and hold for 10 seconds or
longer: Reset to factory default
1 432
Notes - PSE max output is 4W if FAP-C24JE is powered by 802.3af (15.4W)
- PSE max output is 802.3af (15.2W) if it is powered by 802.3at (25.5W)
- PoE out is only available if power source is PoE
Device Guide
7

LAN1 LAN2 LAN3/
PSE
RJ45
Pass-Through
12VDC
(optional)
Mounting
screw
RJ45
Pass-Through
CONSOLE
WAN/POE
8

Wall-mount
1 1
1 1
2
3
2 3
1
2Junction-box: NA, Japan, AUS/NZ
33
3Junction-box: EU, UK, China, AUS/NZ, Korea
9

10
Installation
Torx screwdriver
is required (not
included)
Electrical box
pre-installed
(not included)
60mm
The unit can be mounted on a junction box using the mounting
hardware provided. It is recommended to use the Security Torx
screw to mount the FAP-C24JE to the mount plate for higher
security (Torx screwdriver not included).
The holes on the mounting hardware fit the electrical wall box of
NA, EU, UK, China, Japan, AUS/NZ, and Korea.

11
Basic Connection
WAN/POE
Network Core/FortiGate
Connect the FortiAP device to a FortiGate controller or
an Internet connection.
Ensure that the Power over Ethernet (PoE) cable is
connected to an applicable port on your FortiGate
device or PoE injector.
Caution: Adequate grounding must be provided
to the FortiAP unit and the PoE injector, in
compliance with your local electrical code or
regulations.
Warning: This device complies with IEEE 802.3af
PoE specification. Do not use any PoE injectors
that are not IEEE 802.3af compliant as they may
damage your device.

12
FortiAPSetup
FortiCloud
Internet
FortiAP
WAN/POE
A
Cloud provisioning with FortiCloud
OR
FortiAP
WAN/POE
B
FortiGate secured on local network
FortiGate
Ethernet Port
FortiAPSetup Video
https://video.fortinet.com/video/92/basic-fortiap-
setup

13
A
FortiCloud
1. Go to http://www.forticloud.com to sign in or
create a new account.
2. Select an existing APNetwork or create one.
To create a new network, go to Add APNetwork
and enter anAPNetwork Name and APPassword.
3. From the left panel, select Deploy APs.
lNo APs in Inventory:Add AP dialog box appears
OR
lAPs in Inventory: Click the +APbutton
3. Enter the unique FortiCloud Key located on the
FortiAP device, then click Submit.
Note: When creating a new network, the AP
Password will be applied to all APs in that AP
network.

14
B
Deployment through a FortiGate
FortiGate support may be available for certain
region codes. Please check the product datasheet
or contact Fortinet sales for details.
Also, please ensure that you are running the
Fortinet recommended version of software on
both FortiGate and FortiAP units. Please check
support.fortinet.com for more information.
If FortiGate is on the same network as the FortiAP:
1. Use FortiGate to preauthorize the FortiAP device.
2. Refer to the “Access Point Deployment” section of
the FortiWiFiand FortiAP Configuration Guide
found at http://forti.net/ap-docs.
3. Plug the FortiAP into your local Ethernet
connection. The FortiAP will self-configure.
Or
1. Instead of preauthorizing, you can use the
FortiGate to authorize the FortiAP device after you
have connected the FortiAP to the network.

15
2. Within two minutes of connecting the FortiAP to
the FortiGate, the device appears on the Managed
FortiAP page in the Web-based Manager: authorize
and assign a profile to the device.
If FortiGate is not on the same network as the
FortiAP:
1. Log into FortiAP directly (IP address: 192.168.1.2)
with username admin and no password, and specify
the IP address of the controlling FortiGate.
2. Connect to FortiAP via the CLI (see “Connecting to
FortiAP CLI” in the FortiWiFi and
FortiAPConfiguration guide).
3. Specify the IP address of the controlling FortiGate:
config capwap wtp acIpAddr 0.0.0.0
4. The FortiAP device connects to FortiGate, and then
you can authorize the FortiAP.

16
Cautions and Warnings
Environmental specifications
Ambient operating temperature: 0C to 40C
Refer to specific Product Model Data Sheet for Environmental
Specifications (Operating Temperature, Storage Temperature, Humidity,
and Altitude).
Référez à la Fiche Technique de ce produit pour les caractéristiques
environnementales (Température de fonctionnement, température de
stockage, humidité et l'altitude).
Safety
Caution: This equipment is to be used in a Network Environment 0 per
IECTR 62101. This product is connected only to PoE networks without
routing to the outside plant.
Attention: Ce matériel doit être utilisé dans un Environnement Réseau 0
par IECTR 62101. Ce produit est uniquement connecté aux réseaux PoE
sans installation externe de routage.
This product is intended to be supplied by a Listed Direct Plug-In Power
Unit marked LPS or Class 2 and rated 12 Vdc, 1 A or by 48 Vdc from PoE
source.

17
Le produit doit être alimenté par un bloc d'alimentation à courant continu
homologué UL de 12 Vdc, 1 A nominal marqué LPS ou Class 2 ou par une
source d’alimentation par Ethernet de 48 Vdc (PoE).
Regulatory Notices
Federal Communication Commission (FCC) –
USA
This device complies with Part 15 of FCC Rules. Operation is subject to
the following two conditions: (1) this device may not cause harmful
interference, and (2) this device must accept any interference received;
including interference that may cause undesired operation.
This equipment has been tested and found to comply with the limits for a
Class B digital device, pursuant to Part 15 of the FCC Rules. These limits
are designed to provide reasonable protection against harmful
interference in residential installation. This equipment generates, uses,
and can radiate radio frequency energy, and if it is not installed and used
in accordance with the instruction manual, it may cause harmful
interference to radio communications. However, there is no guarantee
that interference will not occur in a particular installation.
If this equipment does cause harmful interference to radio or television
reception, which can be determined by turning the equipment off and on,
the user is encouraged to try to correct the interference by one or more of
the following measures:

18
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from
that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for
help.
WARNING: Any changes or modifications to this unit not expressly
approved by the party responsible for compliance could void the user’s
authority to operate the equipment.
This equipment complies with FCC radiation exposure limits set forth for
an uncontrolled environment. This equipment should be installed and
operated with minimum distance 20cm between the radiator and your
body. This transmitter must not be co-located or operating in conjunction
with any other antenna or transmitter.
Caution: Operation of this device is restricted to indoor use only.
For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to
indoor environment. The band from 5600-5650MHz will be disabled by
the software during the manufacturing and cannot be changed by the end
user.
This device meets all the other requirements specified in Part 15E,
Section 15.407 of the FCC Rules.

19
Industry Canada Equipment Standard for Digital
Equipment (ICES) – Canada
CAN ICES-3 (B) / NMB-3 (B)
Innovation, Science and Economic Development
(ISED) – Canada
This device complies with Industry Canada’s licence-exempt RSSs.
Operation is subject to the following two conditions: (1) this device may
not cause interference, and (2) this device must accept any interference,
including interference that may cause undesired operation of the device.
Le présent appareil est conforme aux CNR d’Industrie Canada
applicables aux appareils radio exempts de licence. L’exploitation est
autorisée aux deux conditions suivantes: (1) l'appareil ne doit pas
produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout
brouillage radioélectrique subi, même si le brouillage est susceptible
d'en compromettre le fonctionnement.
For product available in the USA/Canada market, only channel 1~11 can
be operated. Selection of other channels is not possible.
Pour les produits disponibles aux États-Unis / Canada du marché, seul
le canal 1 à 11 peuvent être exploités. Sélection d'autres canaux n'est
pas possible.

20
The device meets the exemption from the routine evaluation limits in
section 2.5 of RSS 102 and compliance with RSS-102 RF exposure, users
can obtain Canadian information on RF exposure and compliance.
Le dispositif rencontre l'exemption des limites courantes d'évaluation
dans la section 2.5 de RSS 102 et la conformité à l'exposition de RSS-
102 rf, utilisateurs peut obtenir l'information canadienne sur l'exposition
et la conformité de rf.
This transmitter must not be co-located or operating in conjunction with
any other antenna or transmitter. This equipment should be installed and
operated with a minimum distance of 20 centimeters between the
radiator and your body.
Cet émetteur ne doit pas être Co-placé ou ne fonctionnant en même
temps qu'aucune autre antenne ou émetteur. Cet équipement devrait
être installé et actionné avec une distance minimum de 20 centimètres
entre le radiateur et votre corps.
The maximum antenna gain permitted for devices in the band 5725-5850
MHz shall be such that the equipment still complies with the e.i.r.p. limits
specified for point-to-point and non-point-to-point operation as
appropriate.
Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande
5725-5850 MHz).