Fortinet FortiAP 221E User manual

FortiAP 221E, 223E
QuickStart Guide

7/10/2017
Copyright© 2017 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet,
Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be
registered and/or common law trademarks of Fortinet. All other product or company names
may be trademarks of their respective owners. Performance and other metrics contained
herein were attained in internal lab tests under ideal conditions, and actual performance and
other results may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any binding
commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied,
except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General
Counsel, with a purchaser that expressly warrants that the identified product will perform
according to certain expressly-identified performance metrics and, in such event, only the
specific performance metrics expressly identified in such binding written contract shall be
binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in
the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make
any commitment related to future deliverables, features, or development, and circumstances
may change such that any forward-looking statements herein are not accurate. Fortinet
disclaims in full any covenants, representations,and guarantees pursuant hereto, whether
express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise
revise this publication without notice, and the most current version of the publication shall be
applicable.

Cautions and Warnings
Environmental specifications
Ambient operating temperature: 0C to 40C
Refer to specific Product Model Data Sheet for Environmental
Specifications (Operating Temperature, Storage Temperature,
Humidity, and Altitude).
Référez à la Fiche Technique de ce produit pour les caractéristiques environnementales
(Température de fonctionnement, température de stockage, humidité et l'altitude).
Safety
Caution: This equipment is to be used in a Network Environment 0 per IECTR
62101. This product is connected only to PoE networks without routing to the
outside plant.
Attention: Ce matériel doit être utilisé dans un Environnement Réseau 0 par
IECTR 62101. Ce produit est uniquement connecté aux réseaux PoE sans
installation externe de routage.
QuickStart Guide

Box Includes
or
FortiAP device QuickStart
Guide
5 GHz
2.4 GHz
X2 2.4 GHz
X2 5 GHz
(Model 223E)
Wall Mounting Hardware Antennae
4
(Externa antenna
models)

Before YouBegin
Write down details typically provided by your network administrator or ISP.
Static IPaddress
IPaddress ___________________
Subnet Mask ___________________
Default Gateway ___________________
Primary/Secondary DNS ___________________
DHCP
It is normal to not require a hostname, but your ISP might require it.
Hostname ___________________
QuickStart Guide Video
https://video.fortinet.com/video/177/
fortigate-and-fortiap
5

FortiAP 221E - Device Front
FortiAP 221E
O: No Power
Green: Power on and
ready for operation
Blinking: Device booting
O: FortiGate Wireless controller
has not been found
Amber: FortiGate Wireless controller has
been found but this AP is not managed
Amber Blinking: Error/Fault in connecting
to FortiGate Wireless controller
Green: This AP is being managed by
FortiGate Wireless controller
LED5: Power
LED4: Status
O: Ethernet Link administratively disabled/o
Amber: 100Mbps is active
Amber Blinking: Trac is transmitting at 100Mbps
Green: 1000Mbps is active
Green Blinking: Trac is transmitting at 1000Mbps
LED3: Ethernet port
O: Wireless Link
administratively disabled/o
Green: 5GHz Wireless Radio
enabled
Blinking: Transmitting and
receiving data
LED1: WLAN 2 (5GHz)
O: Wireless Link administratively disabled/o
Green: 2.4GHz Wireless Radio enabled
Blinking: Transmitting and receiving data
LED2: WLAN 1 (2.4GHz)
6
Internal antenna models Device Front :

FortiAP 223E - Device Front
FortiAP 223E
O: No Power
Green: Power on and
ready for operation
Blinking: Device booting
O: FortiGate Wireless controller
has not been found
Amber: FortiGate Wireless controller has
been found but this AP is not managed
Amber Blinking: Error/Fault in connecting
to FortiGate Wireless controller
Green: This AP is being managed by
FortiGate Wireless controller
LED5: Power
LED4: Status
O: Ethernet Link administratively disabled/o
Amber: 100Mbps is active
Amber Blinking: Trac is transmitting at 100Mbps
Green: 1000Mbps is active
Green Blinking: Trac is transmitting at 1000Mbps
LED3: Ethernet port
O: Wireless Link
administratively disabled/o
Green: 5GHz Wireless Radio
enabled
Blinking: Transmitting and
receiving data
LED1: WLAN 2 (5GHz)
O: Wireless Link administratively disabled/o
Green: 2.4GHz Wireless Radio enabled
Blinking: Transmitting and receiving data
LED2: WLAN 1 (2.4GHz)
7
External antenna models Device Front:

FortiAP 221E - Device Rear
LAN/PoE
Power connection
for optional power
adapter.
12V DC,
center positive.
FortiAP 223E - Device Rear
LAN/PoE
Power connection
for optional power
adapter.
12V DC,
center positive.
5.0 GHz
Antenna
5.0 GHz
Antenna
2.4 GHz
Antenna
2.4 GHz
Antenna
8
Internal antenna models Device Rear:
External antenna models Device Rear:

Installation
lock
unlock
9

or
The unit can be mounted on a wall or ceiling using
the mounting hardware provided.
The electrical wall box must be pre-installed.
10

Basic Connection
WAN/POE
Network Core/FortiGate
Connect the FortiAP device to a FortiGate controller or an Internet connection.
Ensure that the Power over Ethernet (PoE) cable is connected to an applicable
port on your FortiGate device or PoE injector.
Caution: Adequate grounding must be provided to the FortiAP unit and
the PoE injector, in compliance with your local electrical code or
regulations.
Warning: This device complies with IEEE 802.3af PoE specification. Do
not use any PoE injectors that are not IEEE 802.3af compliant as they
may damage your device.
11

FortiAPSetup
Deployment through a FortiGate
Ensure that you are running the Fortinet recommended version of
software. Please check support.fortinet.com for more information.
If FortiGate is on the same network as the FortiAP:
1. Use FortiGate to preauthorize the FortiAP device.
2. Refer to the “Access Point Deployment” section of the FortiWiFiand
FortiAP Configuration Guide found at http://forti.net/ap-docs.
3. Plug the FortiAP into your local Ethernet connection. The FortiAP will self-
configure.
Or
1. Instead of preauthorizing, you can use the FortiGate to authorize the
FortiAP device after you have connected the FortiAP to the network.
2. Within two minutes of connecting the FortiAP to the FortiGate, the device
appears on the Managed FortiAP page in the Web-based Manager:
authorize and assign a profile to the device.
12

If FortiGate is not on the same network as the FortiAP:
1. Log into FortiAP directly (IP address: 192.168.1.2) with username admin
and no password, and specify the IP address of the controlling FortiGate.
2. Connect to FortiAP via the CLI using the instructions in the “Connecting
to FortiAP CLI” section of the FortiWiFi and FortiAPConfiguration guide.
3. Specify the IP address of the controlling FortiGate:
cfg -a AC_IPADDR_1=0.0.0.0
cfg -c
where 0.0.0.0 is the address of the FortiGate.
4. The FortiAP device connects to FortiGate, and then you can authorize the
FortiAP.
13

Cautions and Warnings
Environmental specifications
Ambient operating temperature: 0C to 40C
Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature,
Storage Temperature, Humidity, and Altitude)
Référez à la Fiche Technique de ce produit pour les caractéristiques environnementales (Température
de fonctionnement, température de stockage, humidité et l'altitude).
Safety
Battery – Risk of explosion if the battery is replaced by an incorrect type. Do not dispose of batteries
in a fire. They may explode. Dispose of used batteries according to your local regulations.
IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to batteries.
Batterie – Risque d'explosion si la batterie est remplacée par un type incorrect. Ne jetez pas les
batteries au feu. Ils peuvent exploser. Jetez les piles usagées conformément aux réglementations
locales. IMPORTANT: Suisse: l'annexe 4.10 de SR814.013 s’appliquent aux batteries.
警告
本電池如果更換不正確會有爆炸的危險
請依製造商說明書處理用過之電池
Caution: This equipment is to be used in a Network Environment 0 per IECTR 62101. This product is
connected only to PoE networks without routing to the outside plant.
Attention: Ce matériel doit être utilisé dans un Environnement Réseau 0 par IECTR 62101. Ce produit
est uniquement connecté aux réseaux PoE sans installation externe de routage.
This product is intended to be supplied by a Listed Direct Plug-In Power Unit marked LPS or Class 2
and rated 12 Vdc, 2A or by 54 Vdc from PoE source.
14

Le produit doit être alimenté par un bloc d'alimentation à courant continu homologué UL de 12 Vdc, 2A
nominal marqué LPS ou Class 2 ou par une source d’alimentation par Ethernet de 48 Vdc (PoE).
Regulatory Notices
Federal Communication Commission (FCC) – USA
This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received; including interference that may cause undesired
operation.
This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in residential installation. This equipment generates, uses, and can radiate
radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it
may cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation.
If this equipment does cause harmful interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
WARNING: Any changes or modifications to this unit not expressly approved by the party responsible
for compliance could void the user’s authority to operate the equipment
15

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the radiator
and your body. This transmitter must not be co-located or operating in conjunction with any other
antenna or transmitter.
Caution: Operation of this device is restricted to indoor use only.
For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor environment.
This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules.
Industry Canada Equipment Standard for Digital Equipment (ICES) –
Canada
This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
Innovation, Science and Economic Development (ISED) – Canada
This device complies with ISED license-exempt RSS standard(s). Operation is subject to the following
two conditions: (1) this device may not cause interference, and (2) this device must accept any
interference, including interference that may cause undesired operation of the device.
Le présent appareil est conforme aux CNR d' ISED applicables aux appareils radio exempts de
licence. L'exploitation est autorisée aux deux conditions suivantes : (1)l'appareil ne doit pas produire
de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si
le brouillage est susceptible d'en compromettre le fonctionnement.
For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of
other channels is not possible.
Pour les produits disponibles aux États-Unis / Canada du marché, seul le canal 1 à 11 peuvent être
exploités. Sélection d'autres canaux n'est pas possible.
16
This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
This device complies with ISED license-exempt RSS standard(s). Operation is subject to the
following two conditions: (1) this device may not cause interference, and (2) this device must
accept any interference, including interference that may cause undesired operation of the
device.
Le présent appareil est conforme aux CNR d' ISED applicables aux appareils radio exempts de
licence. L'exploitation est autorisée aux deux conditions suivantes : (1) l'appareil ne doit pas
produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage
radioélectrique subi, même si le brouillage est susceptible d'en compromettre le
fonctionnement.
For product available in the USA/Canada market, only channel 1~11 can be operated. Selection
of other channels is not possible.
Pour les produits disponibles aux États-Unis / Canada du marché, seul le canal 1 à 11 peuvent
être exploités. Sélection d'autres canaux n'est pas possible.m
This equipment complies with ISED radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with minimum distance 23cm
between the radiator & your body.
Cet équipement est conforme aux limites d'exposition aux rayonnements ISED établies pour un
environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de
23cm de distance entre la source de rayonnement et votre corps.

This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 23cm between the radiator &
your body.
Cet équipement est conforme aux limites d'exposition aux rayonnements ISED établies pour un
environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de 23cm de
distance entre la source de rayonnement et votre corps.
The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the
equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point
operation as appropriate.
Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz) doit se
conformer à la limite de p.i.r.e. spécifiée pour l’exploitation point à point et non point à point, selon le
cas.
Caution: The device for the band 5150-5250 MHz is only for indoor usage to reduce potential for
harmful interference to co-channel mobile satellite systems. High-power radars are allocated as
primary users (i.e. priority users) of the bands 5250-5350 MHz and 5650-5850 MHz and that these
radars could cause interference and/or damage to LE-LAN devices.
Attention: Le dispositif de la bande 5150-5250 MHz est réservé à un usage intérieur afin de réduire
l'interférence nuisible potentielle aux systèmes mobiles par satellite co-canal. Les radars à haute
puissance sont désignés comme utilisateurs principaux (à savoir les utilisateurs prioritaires) des
bandes 5250-5350 MHz et 5650-5850 MHz et que ces radars pourraient causer des interférences et /
ou endommager les périphériques LE-LAN
This device has been designed to operate with an antenna having a maximum gain of 4.58 dBi for
2.4GHz and 5.6 dBi for 5GHz. Antenna having a higher gain is strictly prohibited per regulations of
ISED. The required antenna impedance is 50 ohms.
Under ISED regulations, this radio transmitter may only operate using an antenna of a type and
maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio interference
17
Caution: The device for the band 5150-5250 MHz is only for indoor usage to reduce potential
for harmful interference to co-channel mobile satellite systems.
The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that
the equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-
point operation as appropriate.
Users should also be advised that high-power radars are allocated as primary users (i.e. priority
users) of the bands 5650-5850 MHz and that these radars could cause interference and/or
damage to LE-LAN devices.
Attention: Le dispositif de la bande 5150-5250 MHz est réservé à un usage intérieur afin de
réduire l'interférence nuisible potentielle aux systèmes mobiles par satellite co-canal.
Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz)
doit se conformer à la limite de p.i.r.e. spécifiée pour l’exploitation point à point et non point à
point, selon le cas.
De plus, les utilisateurs devraient aussi être avisés que les utilisateurs de radars de haute
puissance sont désignés utilisateurs principaux (c.-à-d., qu’ils ont la priorité) pour les bandes
5650-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux
dispositifs LAN-EL.
This device has been designed to operate with an antenna having a maximum gain of 4.58 dBi
for 2.4GHz and 5.6 dBi for 5GHz. Antenna having a higher gain is strictly prohibited per
regulations of ISED. The required antenna impedance is 50 ohms.
Under ISED regulations, this radio transmitter may only operate using an antenna of a type and
maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio
interference to other users, the antenna type and its gain should be so chosen that the
equivalent isotopically radiated power (e.i.r.p.) is not more than that necessary for successful
communication.
Ce dispositif a été conçu pour fonctionner avec une antenne ayant un gain maximal de 4.58 dBi
pour 2,4 GHz et 5.6 dBi pour 5GHz. Une antenne ayant un gain supérieur sont strictement
interdites par la réglementation d'ISED. L'impédance d'antenne requise est de 50 ohms.
this device.
Le présent émetteur radio (IC: 7280B-140701) a été approuvé par ISED pour fonctionner avec les
types d'antenne énumérés ci-dessous et ayant un gain admissible maximal et l'impédance
requise pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le
gain est supérieur au gain maximal indiqué, sont strictement interdits pour l'exploitation de
l'émetteur.
This device and it's antennas(s) must not be co-located or operating in conjunction with any
other antenna or transmitter except in accordance with IC multi-transmitter product
procedures.
Cet appareil et son antenne (s) ne doit pas être co-localisés ou fonctionnement en association
avec une autre antenne ou transmetteur.

to other users, the antenna type and its gain should be so chosen that the equivalent isotopically
radiated power (e.i.r.p.) is not more than that necessary for successful communication.
Ce dispositif a été conçu pour fonctionner avec une antenne ayant un gain maximal de 4.58 dBi pour
2,4 GHz et 5.6 dBi pour 5GHz. Une antenne ayant un gain supérieur sont strictement interdites par la
réglementation d'ISED. L'impédance d'antenne requise est de 50 ohms.
Conformément à la réglementation d'ISED, cet émetteur radio peut fonctionner seulement avec une
antenne d’un type et d'un gain maximal (ou inférieur) approuvé pour l'émetteur par ISED. Dans le but
de réduire les risques de brouillage radioélectrique aux autres utilisateurs, il faut choisir le type
d'antenne et son gain de sorte que la puissance isotrope rayonnée équivalente (p.i.r.e.) ne dépasse
pas l'intensité nécessaire à l'établissement d'une communication réussie.
This radio transmitter (IC: 7280B-140701)has been approved by ISED to operate with the antenna
types listed below with the maximum permissible gain and required antenna impedance for each
antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum
gain indicated for that type, are strictly prohibited for use with this device.
Le présent émetteur radio (IC: 7280B-140701) a été approuvé par ISED pour fonctionner avec les types
d'antenne énumérés ci-dessous et ayant un gain admissible maximal et l'impédance requise pour
chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le gain est supérieur
au gain maximal indiqué, sont strictement interdits pour l'exploitation de l'émetteur.
This device and it's antennas(s) must not be co-located or operating in conjunction with any other
antenna or transmitter except in accordance with IC multi-transmitter product procedures.
Cet appareil et son antenne (s) ne doit pas être co-localisés ou fonctionnement en association avec une
autre antenne ou transmetteur.
18
Conformément à la réglementation d'ISED, cet émetteur radio peut fonctionner seulement avec
une antenne d’un type et d'un gain maximal (ou inférieur) approuvé pour l'émetteur par ISED.
Dans le but de réduire les risques de brouillage radioélectrique aux autres utilisateurs, il faut
choisir le type d'antenne et son gain de sorte que la puissance isotrope rayonnée équivalente (p.
i.r.e.) ne dépasse pas l'intensité nécessaire à l'établissement d'une communication réussie.
This radio transmitter (IC: 7280B-140701) has been approved by ISED to operate with the
antenna types listed below with the maximum permissible gain and required antenna
impedance for each antenna type indicated. Antenna types not included in this list, having a
gain greater than the maximum gain indicated for that type, are strictly prohibited for use with
this device.
Le présent émetteur radio (IC: 7280B-140701) a été approuvé par ISED pour fonctionner avec
les types d'antenne énumérés ci-dessous et ayant un gain admissible maximal et l'impédance
requise pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le
gain est supérieur au gain maximal indiqué, sont strictement interdits pour l'exploitation de l'
émetteur.
This device and it's antennas(s) must not be co-located or operating in conjunction with any
other antenna or transmitter except in accordance with IC multi-transmitter product
procedures.
Cet appareil et son antenne (s) ne doit pas être co-localisés ou fonctionnement en association
avec une autre antenne ou transmetteur.

Brand
Holder Quantity Antenna Type Connector
Gain (dBi)
2.4GHz 5GHz
Internal antenna model
Senao
Networks, Inc 1 Printed IPEX 4.5 -
Senao
Networks, Inc 1 Printed IPEX 4.5 -
Senao
Networks, Inc 1 Printed IPEX - 5.6
Senao
Networks, Inc 1 Printed IPEX - 5.6
Brand
Holder Quantity Antenna Type Connector
Gain (dBi)
2.4GHz 5GHz
External antenna model
Senao
Networks,
Inc
2 Dipole RPSMAPlug 4.58 -
Senao
Networks,
Inc
2 Dipole RPSMAPlug - 5.35
19
4.4

European Conformity (CE) - EU
This is a Class B product. In a domestic environment, this product may cause radio interference, in
which case the user may be required to take adequate measures.
The product transmits within the frequency ranges and less than or equal to the power listed below:
2412-2472MHz less than 20dBm
5180-5240MHz less than 23dBm
5260-5320MHz less than 23dBm *
5500-5700MHz less than 30dBm *
Note: * Only with DFS bands certification.
20