Fortinet FortiAP 320B User manual

FortiAP 320B
QuickStart Guide

October 16, 2012
20-430-178012-20121016
Copyright© 2012 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
and FortiGuard®, are registered trademarks of Fortinet, Inc., and other
Fortinet names herein may also be trademarks of Fortinet. All other
product or company names may be trademarks of their respective
owners. Performance metrics contained herein were attained in internal
lab tests under ideal conditions, and performance may vary. Network
variables, different network environments and other conditions may affect
performance results. Nothing herein represents any binding commitment by
Fortinet, and Fortinet disclaims all warranties, whether express or implied,
except to the extent Fortinet enters a binding written contract, signed by
Fortinet’s General Counsel, with a purchaser that expressly warrants that the
identified product will perform according to the performance metrics herein.
For absolute clarity, any such warranty will be limited to performance in the
same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in
full any guarantees. Fortinet reserves the right to change, modify, transfer,
or otherwise revise this publication without notice, and the most current
version of the publication shall be applicable.

Table of Contents
Package Contents 1
Mounting Your FortiAP Unit 2
Connecting Your FortiAP Unit 3
Configuring Your FortiAP Unit 4
Technical Specifications 6
LED Specifications 7
Cautions and Warnings 8
Documentation and Links 11
Register Your Product 12
Product License Agreement 13

Package Contents
Fortinet’s FortiAP wireless thin access points deliver secure, identity-driven
WiFi client access that creates a fortified WLAN network that is centrally
managed by a FortiGate or FortiWiFi platform. The FortiAP 320B has
built-in PoE to support excellent long-range network installation.
Your box contains the following:
FortiAP 320B
QuickStart Guide
Wall Mounting Hardware Kit
T-rail Mounting Hardware Kit
Page 1
Wall Mounting
Hardware Kit
FortiAP 320B
QuickStart Guide
QuickStart Guide T-rail Mounting Hardware Kit

Mounting Your FortiAP Unit
Page 3Page 2
Using the provided hardware, the FortiAP unit can be attached to a ceiling
or wall.
To attach the unit to a wall using the wall mounting hardware kit:
1. Insert the anchors provided in the wall mounting hardware kit into an
appropriate location on a wall.
2. Insert the screws provided in the wall mounting hardware kit into the
anchors.
3. Mount the FortiAP unit onto the screws.
To attach the unit to a ceiling using the T-rail mounting hardware kit:
1. Attach the T-rail connector to the bottom cover of the FortiAP unit using
the four provided short screws.
If extra space is required to accommodate drop ceiling tiles, use the taller
T-rail connector.
2. Line up the connected T-rail connector with an appropriately sized rail
and twist the unit onto the rail until it snaps into place.
Note: To protect your FortiAP unit, use the Kensington security slot to
attach a cable lock (cable lock is not included).

Page 3
Using the provided mounting hardware, attach the FortiAP unit to a wall or
ceiling, as described in the previous chapter.
Adequate grounding must be provided to the FortiAP unit and the PoE
injector, in compliance with the local electrical code.
Caution: This device complies with IEEE 802.3af and 802.3at PoE
specification. Do not use any PoE injectors that are not IEEE 802.3af or
802.3at compliant, as they may damage your device.
To connect the FortiAP unit:
1. Insert an Ethernet cable into the LAN 1 or LAN 2 port of the FortiAP unit.
2. Insert the other end of the Ethernet cable into your FortiGate or FortiWifi
unit, or into the AP/Bridge port on your PoE adapter.
3. If you are not using PoE, connect a region-specific AC plug adapter to the
optional power adapter by inserting the round disk into the adapter and
rotating clockwise until you hear the disk lock in place. Then insert the DC
plug of the power adapter into the DC power jack on the FortiAP unit. The
Power LED will light up.
Redundant PoE Interfaces
The FortiAP 320B has dual, redundant PoE Ethernet Interfaces, allowing
uptime to be maintained even if one PoE injector or Ethernet link is
disconnected.
Connecting the LAN 1 port to a PoE injector and the LAN 2 port to a
second PoE injector will allow the device to remain operational as long as
one of the two injectors in still working.
Connecting Your FortiAP Unit

Page 4
Configuring Your FortiAP Unit
The FortiAP unit is designed to require no configuration in most networks. Zero
Configuration mode works if the unit is directly connected to the FortiGate or
FortiWifi performing the Wireless LAN Controller (WLC) functions, or on the same
layer-2 network and subnet as the FortiGate or FortiWifi unit.
If the FortiAP wireless controller’s IP address cannot be determined using Zero
Configuration mode, or if the network uses static IP addresses, it can be configured
to use a static IP address.
To enable the FortiAP using Zero Configuration:
1. After connecting the FortiAP unit as described in the previous chapter, the unit
goes through its boot procedure and requests an IP address from the DHCP
server.
2. If the IP address is retrieved successfully, the FortiAP enters discovery mode to
locate a FortiGate or FortiWifi wireless controller. The discovery modes are:
• Broadcast
• Multicast
• DHCP option 138
3. Verify that the FortiAP has successfully connected to the controller.
In the FortiGate Web-based Manager, go to WiFi Controller > Managed Access
Points > Managed FortiAP. A successfully discovered unit displays an orange
circle with a question mark.
4. Select the access point and click Edit.
5. In the State field, select Authorize.
6. In the AP Profile field, select Change, then select a profile from the list and click
OK.
The configuration is downloaded from the wireless controller to the FortiAP and
the WiFi LED lights up.
To enable the FortiAP with a static IP address:
1. Connect the FortiAP device to a separate private switch or hub, or directly connect
it to your management computer via a cross-over cable.

2. Configure the management computer to be on the same subnet as the internal
interface of the FortiAP unit:
a. Browse to the Network and Sharing Center > Change Adapter Settings >
Local Area Connection Properties > Internet Protocol Version 4 (TCP/IPv4)
Properties.
b. Change the IP address of the management computer to 192.168.1.3 and the
netmask to 255.255.255.0.
3. Telnet to IP address 192.168.1.2.
4. Type admin in the Name field, leave the Password field blank, and press Enter.
5. Configure a static IP address for the FortiAP unit and netmask & gateway
information for your network, using the following commands:
cfg -a ADDR_MODE=STATIC
cfg –a AP_IPADDR=xxx.xxx.xxx.xx
cfg –a AP_NETMASK=255.255.255.0
cfg –a IPGW=yyy.yyy.yyy.yyy
cfg –a AC_IPADDR_1=zzz.zzz.zzz.zzz
where xxx is the IP address of the FortiAP unit, yyy is the Gateway IP address and
zzz is the IP address of the FortiGate Wireless Controller.
6. Save the configuration by typing the following command:
cfg –c
7. Unplug the FortiAP unit and plug it back in order for the configuration to take
effect.
8. Move the FortiAP to the intended deployment location and connect the Ethernet
cable as described in the Connecting chapter.
9. Log in to the FortiGate controller Web-based Manager, and go to WiFi Controller
> Managed Access Points > Managed FortiAP. A successfully discovered unit
displays an orange circle with a question mark in the Status column.
10.Select the access point and click Edit.
11.In the State field, select Authorize.
12.In the Edit FortiAP dialog box, select Enable Wireless Radio. Leave the remaining
settings at their default values. The configuration is downloaded from the FortiGate
unit to the FortiAP device.
For more information, see the Deploying Wireless Networks Guide, available on
Fortinet’s technical documentation website, http://docs.fortinet.com.
Page 5

Page 6
Technical Specifications
CONSOLE
DC-IN
LAN 1
LAN 2
14 2 3 5
RESET
# Interface Type Description
1 Console RJ-45 Optional connection to the management computer Provides
access to the CLI. Uses the same console cable provided with
your FortiGate or FortiWiFi device.
2 DC-IN Power connection for optional listed power adapter with 12V DC,
2A
3 LAN 1 & 2 RJ-45 Gigabit Ethernet ports with PoE support.
4 Reset Button Hold for 5 seconds to reset the FortiAP unit to its factory defaults.
5 USB USB-A Allows configuration of the device using FortiExplorer on your
mobile device. Requires version 1.0.3 or later.
Hardware Specification Description
WiFi Radios Refer to the product datasheet.
Kensington Security Slot Anti-theft security slot for attaching a lock-and-cable apparatus.
Optional PoE Injector Fortinet PoE Injector: GPI-115 and FortiSwitch products with
PoE support.
Indoor/outdoor Deployment Indoor Only (plenum rated).

Page 7
LED Specifications
# LED State Description
1Power /
System
Off No power.
Amber The CPU or system has a fault.
Flashing Amber The software self testing and loading.
Green Power on and ready for operation.
Flashing Green The device is booting.
2 LAN 1 & 2
Off No Ethernet link detected.
Green 1000 Mbps Ethernet link detected, but no activity.
Flashing Green 1000 Mbps Ethernet link activity.
Amber 100/10 Mbps Ethernet link detected, but no activity.
Flashing Amber 100/10 Mbps Ethernet link activity.
3WiFi Radio
1 & 2
Off Wireless link administratively disabled/off.
Green Wireless interface is functioning correctly, but no activity.
Flashing Green Transmitting and receiving.
321