Fortinet FortiAP 221B User manual

FortiAP 221B
QuickStart Guide

January 08, 2013
20-000-155733-20130108
Copyright© 2013 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
and FortiGuard®, are registered trademarks of Fortinet, Inc., and other
Fortinet names herein may also be trademarks of Fortinet. All other
product or company names may be trademarks of their respective
owners. Performance metrics contained herein were attained in internal
lab tests under ideal conditions, and performance may vary. Network
variables, different network environments and other conditions may affect
performance results. Nothing herein represents any binding commitment by
Fortinet, and Fortinet disclaims all warranties, whether express or implied,
except to the extent Fortinet enters a binding written contract, signed by
Fortinet’s General Counsel, with a purchaser that expressly warrants that the
identified product will perform according to the performance metrics herein.
For absolute clarity, any such warranty will be limited to performance in the
same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in
full any guarantees. Fortinet reserves the right to change, modify, transfer,
or otherwise revise this publication without notice, and the most current
version of the publication shall be applicable.

Table of Contents
Package Contents 1
Mounting Your FortiAP Unit 2
Connecting Your FortiAP Unit 4
Configuring Your FortiAP Unit 5
Technical Specifications 7
LED Specifications 8
Cautions and Warnings 9
Documentation and Links 11
Register Your Product 12
Product License Agreement 13

Package Contents
Fortinet’s FortiAP wireless thin access points deliver secure, identity-driven
WiFi client access that creates a fortified WLAN network that is centrally
managed by a FortiGate or FortiWiFi platform.
Your box contains the following:
FortiAP 221B
QuickStart Guide (with Mounting Template)
Mounting Bracket
T-Rail Mounting Hardware Kit
Wall/Ceiling Mounting Hardware Kit
Page 1
Mounting
Bracket
Wall/Ceiling Mounting
Hardware Kit
T-Rail Mounting
Hardware Kit
QuickStart Guide
FortiAP 221B
QuickStart Guide

Mounting Your FortiAP Unit
Page 2
Using the provided hardware, the FortiAP unit can be attached to a ceiling or wall.
To attach the unit to a ceiling or wall using the mounting bracket:
1. Attach the mounting bracket to the wall or ceiling using the Mounting Template
and the provided wall/ceiling mounting hardware kit (P3.5x32 screws and
Mounting Anchors).
2. Insert the provided P2.6x12 screws into the bottom cover of the FortiAP unit.
3. Leave enough of the screws exposed to ensure that the unit can be attached to
the mounting bracket.
If extra space is required, use the provided spacers and long screws from the
T-Rail mounting hardware kit to increase the space between the unit and the
mounting bracket.
4. Mount the FortiAP unit on the mounted mounting bracket by rotating the unit
clockwise about 90 degrees to secure it in place.
You can now proceed with connecting your FortiAP unit.
Mounting Anchor
P3.5x32 Screw
P2.6x12 Screw
Mounting Bracket
Rotate clockwise to
secure the unit in place
Installation
Template
Wall or Ceiling
Page 3

To attach the unit to a ceiling using the provided T-rail connectors:
1. Attach the T-rail connectors to the bottom cover of the FortiAP unit using the
provided P2.6x10 screws.
Two sizes of T-rail connectors are included in the mounting hardware kit: 15/16in
(2.38cm) and 9/16in (1.43cm).
If extra space is required to accommodate drop ceiling tiles, use the provided
spacers and P2.6x25 screws.
2. Line up the connected T-rail connectors with an appropriately sized rail and press
the unit onto the rail until it snaps into place.
Note: To protect your FortiAP unit from unauthorized removal, use the Kensington
Security Slot to attach a cable lock (cable lock is not included).
P2.6x25 Screw
P2.6x10 Screw
Spacer
Clip
Clip
Clip
T-rail
Kensington
Security Slot
Page 3

Page 4
Using the provided mounting hardware, attach the FortiAP unit to a wall or ceiling,
as described in the previous section.
Adequate grounding must be provided to the FortiAP unit and the PoE injector, in
compliance with your local electrical code or regulations.
Caution: This device complies with IEEE 802.3af PoE specification. Do not use any
PoE injectors that are not IEEE 802.3af compliant as they may damage your device.
To connect the FortiAP unit:
1. Insert an Ethernet cable into the Ethernet port of the FortiAP unit.
2. Insert the other end of the Ethernet cable into your FortiGate, FortiWifi, or
FortiSwitch unit.
If you are using PoE, ensure that the Ethernet cable is connected to an applicable
port on your FortiGate unit, FortiSwitch unit, or PoE injector.
3. If you are not using PoE, connect a region-specific AC plug adapter to the optional
power adapter by inserting the round disk into the adapter and rotating clockwise
until you hear the disk lock in place. Then insert the DC plug of the power adapter
into the DC power jack on the FortiAP unit.
Note: For FortiWifi units, the wireless controller feature is only supported on units
running FortiOS 4.0 MR3 and higher.
Caution: This equipment is to be connected only to PoE networks without routing
to the outside plant.
Connecting Your FortiAP Unit

Page 5
Configuring Your FortiAP Unit
The FortiAP unit is designed to require no configuration in most networks. Zero
Configuration mode works if the unit is directly connected to the FortiGate or
FortiWifi performing the Wireless LAN Controller (WLC) functions, or on the same
layer-2 network and subnet as the FortiGate or FortiWifi unit.
If the FortiAP wireless controller’s IP address cannot be determined using Zero
Configuration mode, or if the network uses static IP addresses, it can be configured
to use a static IP address.
To enable the FortiAP using Zero Configuration:
1. After connecting the FortiAP unit as described in the previous chapter, the unit
goes through its boot procedure and requests an IP address from the DHCP
server.
2. If the IP address is retrieved successfully, the FortiAP enters discovery mode to
locate a FortiGate or FortiWifi wireless controller. The discovery modes are:
• Broadcast
• Multicast
• DHCP option 138
3. Verify that the FortiAP has successfully connected to the controller.
In the FortiGate Web-based Manager, go to WiFi Controller > Managed Access
Points > Managed FortiAP. A successfully discovered unit displays an orange
circle with a question mark.
4. Select the access point and click Edit.
5. In the State field, select Authorize.
6. In the AP Profile field, select Change, then select a profile from the list and click
OK.
The configuration is downloaded from the wireless controller to the FortiAP and
the WiFi LED lights up.
To enable the FortiAP with a static IP address:
1. Connect the FortiAP device to a separate private switch or hub, or directly connect
it to your management computer via a cross-over cable.

2. Configure the management computer to be on the same subnet as the internal
interface of the FortiAP unit:
a. Browse to the Network and Sharing Center > Change Adapter Settings >
Local Area Connection Properties > Internet Protocol Version 4 (TCP/IPv4)
Properties.
b. Change the IP address of the management computer to 192.168.1.3 and the
netmask to 255.255.255.0.
3. Use a Telnet apllication to connect to IP address 192.168.1.2.
4. Type admin in the Name field, leave the Password field blank, and press Enter.
5. Configure a static IP address for the FortiAP unit and netmask & gateway
information for your network, using the following commands:
cfg -a ADDR_MODE=STATIC
cfg –a AP_IPADDR=xxx.xxx.xxx.xx
cfg –a AP_NETMASK=255.255.255.0
cfg –a IPGW=yyy.yyy.yyy.yyy
cfg –a AC_IPADDR_1=zzz.zzz.zzz.zzz
where xxx is the IP address of the FortiAP unit, yyy is the Gateway IP address and
zzz is the IP address of the FortiGate Wireless Controller.
6. Save the configuration by typing the following command:
cfg –c
7. Unplug the FortiAP unit and plug it back in order for the configuration to take
effect.
8. Move the FortiAP to the intended deployment location and connect the Ethernet
cable as described in the Connecting Your FortiAP Unit section.
9. Log in to the FortiGate controller Web-based Manager, and go to WiFi Controller
> Managed Access Points > Managed FortiAP. A successfully discovered unit
displays an orange circle with a question mark in the Status column.
10.Select the access point and click Edit.
11.In the State field, select Authorize.
12.In the Edit FortiAP dialog box, select Enable Wireless Radio. Leave the remaining
settings at their default values. The configuration is downloaded from the FortiGate
unit to the FortiAP device.
For more information, see the Deploying Wireless Networks Guide, available on
Fortinet’s technical documentation website, http://docs.fortinet.com.
Page 6

Page 6 Page 7
Technical Specifications
# Interface Type Description
1 Ethernet Port RJ-45 Gigabit Ethernet port with PoE support up to 12.9W, IEEE 802.3af.
2 DC-IN Power connection for optional power adapter.
12V DC, 1.25A, center positive
3 Kensington
Security Slot
Anti-theft security slot for attaching a lock-and-cable apparatus.
4 Reset Button Hold for 5 seconds to reset the FortiAP unit to its factory defaults.
Hardware Specification Description
Optional PoE Injector Fortinet PoE Injector: GPI-115 and FortiSwitch products with
PoE support.
Frequency Bands (GHz) 802.11a/n: 5.150–5.250, 5.250–5.350, 5.470–5.725,
5.725–5.850
802.11b/g/n: 2.400–2.483
Indoor/Outdoor Deployment Indoor Only
Note: The availability of some specific channels and/or operational frequency bands are country-
specific and are firmware programmed at the factory to match the intended destination. The
firmware setting is not accessible by the end user.
POE 48V
3
1 2 4