Fortinet FortiAP S221E User manual

FortiAP S221E, S223E
QuickStart Guide

4/12/2018
Copyright© 2018 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet,
Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be
registered and/or common law trademarks of Fortinet. All other product or company names
may be trademarks of their respective owners. Performance and other metrics contained
herein were attained in internal lab tests under ideal conditions, and actual performance and
other results may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any binding
commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied,
except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General
Counsel, with a purchaser that expressly warrants that the identified product will perform
according to certain expressly-identified performance metrics and, in such event, only the
specific performance metrics expressly identified in such binding written contract shall be
binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in
the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make
any commitment related to future deliverables, features, or development, and circumstances
may change such that any forward-looking statements herein are not accurate. Fortinet
disclaims in full any covenants, representations,and guarantees pursuant hereto, whether
express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise
revise this publication without notice, and the most current version of the publication shall be
applicable.

Box Includes
or
FortiAP device QuickStart
Guide
5 GHz
2.4 GHz
X2 2.4GHz
X2 5GHz
(Model S223E)
Wall Mounting Hardware (including Standard and
Recessed Brackets) Antennae
3

Before YouBegin
Write down details typically provided by your network administrator or ISP.
Static IPaddress
IPaddress ___________________
Subnet Mask ___________________
Default Gateway ___________________
Primary/Secondary DNS ___________________
DHCP
It is normal to not require a hostname, but your ISP might require it.
Hostname ___________________
QuickStart Guide Video
https://video.fortinet.com/video/177/
fortigate-and-fortiap
4

FortiAP S221E - Device Front
O: System is o
Green: System is on
Blinking: System is booting
up or upgrading
Orange: Reserved for
customized conguration
LED5: Power/Status
O: WiFi link is o
Blue: 2.4GHz link is on
Blinking: Data transmitting
/receiving at 2.4GHz link
Orange: 5GHz link is on
Blinking: Data transmitting/
receiving at 5GHz link
Green: 2.4 GHz and 5GHz
link is on
LED2: WIFI
O: Bluetooth non-activity
Green: Bluetooth activity
Blinking: Data transmitting/
receiving
LED1: BT/BLE
O: Link is o
Green: Link is on
Blinking: Data is transmitting/
receiving at 1000Mbps
Blinking: Data is transmitting/
receiving at 100Mbps
LED3: LAN 2
LED4: LAN1
O: Link is o
Green: Link is on
Blinking: Data is transmitting/
receiving at 1000Mbps
Blinking: Data is transmitting/
receiving at 100Mbps
5

FortiAP S223E - Device Front
O: System is o
Green: System is on
Blinking: System is booting
up or upgrading
Orange: Reserved for
customized conguration
LED5: Power/Status
O: WiFi link is o
Blue: 2.4GHz link is on
Blinking: Data transmitting
/receiving at 2.4GHz link
Orange: 5GHz link is on
Blinking: Data transmitting/
receiving at 5GHz link
Green: 2.4 GHz and 5GHz
link is on
LED2: WIFI
O: Bluetooth non-activity
Green: Bluetooth activity
Blinking: Data transmitting/
receiving
LED1: BT/BLE
O: Link is o
Green: Link is on
Blinking: Data is transmitting/
receiving at 1000Mbps
Blinking: Data is transmitting/
receiving at 100Mbps
LED3: LAN 2
LED4: LAN1
O: Link is o
Green: Link is on
Blinking: Data is transmitting/
receiving at 1000Mbps
Blinking: Data is transmitting/
receiving at 100Mbps
6

FortiAP S221E - Device Rear
LAN/PoE
Power connection
for optional power
adapter.
12V DC,
center positive.
FortiAP S223E - Device Rear
LAN/PoE
Power connection
for optional power
adapter.
12V DC,
center positive.
5.0 GHz
Antenna
5.0 GHz
Antenna
2.4 GHz
Antenna
2.4 GHz
Antenna
7

Installation
Ceiling bracket install
slide direction
Mounting an AP below
a suspended ceiling Ceiling T-Rail
Ceiling Bracket
The unit (S221E or S223E) can be mounted on a wall or ceiling using
the mounting hardware provided.
The electrical wall box must be pre-installed.
8

Basic Connection
WAN/POE
Network Core/FortiGate
Connect the FortiAP device to a FortiGate controller or an Internet connection.
Ensure that the Power over Ethernet (PoE) cable is connected to an applicable
port on your FortiGate device or PoE injector.
Caution: Adequate grounding must be provided to the FortiAP unit and
the PoE injector, in compliance with your local electrical code or
regulations.
Warning: This device complies with IEEE 802.3af PoE specification. Do
not use any PoE injectors that are not IEEE 802.3af compliant as they
may damage your device.
9

FortiAPSetup
Deployment through a FortiGate
Ensure that you are running the Fortinet recommended version of
software. Please check support.fortinet.com for more information.
If FortiGate is on the same network as the FortiAP:
1. Use FortiGate to preauthorize the FortiAP device.
2. Refer to the “Access Point Deployment” section of the FortiWiFiand
FortiAP Configuration Guide found at http://forti.net/ap-docs.
3. Plug the FortiAP into your local Ethernet connection. The FortiAP will self-
configure.
Or
1. Instead of preauthorizing, you can use the FortiGate to authorize the
FortiAP device after you have connected the FortiAP to the network.
2. Within two minutes of connecting the FortiAP to the FortiGate, the device
appears on the Managed FortiAP page in the Web-based Manager:
authorize and assign a profile to the device.
10

If FortiGate is not on the same network as the FortiAP:
1. Log into FortiAP directly (IP address: 192.168.1.2) with username admin
and no password, and specify the IP address of the controlling FortiGate.
2. Connect to FortiAP via the CLI using the instructions in the “Connecting
to FortiAP CLI” section of the FortiWiFi and FortiAPConfiguration guide.
3. Specify the IP address of the controlling FortiGate:
cfg -a AC_IPADDR_1=0.0.0.0
cfg -c
where 0.0.0.0 is the address of the FortiGate.
4. The FortiAP device connects to FortiGate, and then you can authorize the
FortiAP.
11

Cautions and Warnings
Environmental specifications
Ambient operating temperature: 0C to 40C
Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature,
Storage Temperature, Humidity, and Altitude)
Référez à la Fiche Technique de ce produit pour les caractéristiques environnementales (Température
de fonctionnement, température de stockage, humidité et l'altitude).
Safety
Battery – Risk of explosion if the battery is replaced by an incorrect type. Do not dispose of batteries
in a fire. They may explode. Dispose of used batteries according to your local regulations.
IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to batteries.
Batterie – Risque d'explosion si la batterie est remplacée par un type incorrect. Ne jetez pas les
batteries au feu. Ils peuvent exploser. Jetez les piles usagées conformément aux réglementations
locales. IMPORTANT: Suisse: l'annexe 4.10 de SR814.013 s’appliquent aux batteries.
警告
本電池如果更換不正確會有爆炸的危險
請依製造商說明書處理用過之電池
Caution: This equipment is to be used in a Network Environment 0 per IECTR 62101. This product is
connected only to PoE networks without routing to the outside plant.
Attention: Ce matériel doit être utilisé dans un Environnement Réseau 0 par IECTR 62101. Ce produit
est uniquement connecté aux réseaux PoE sans installation externe de routage.
This product is intended to be supplied by a Listed Direct Plug-In Power Unit marked LPS or Class 2
and rated 12 Vdc, 2A or by 54 Vdc from PoE source.
12

Le produit doit être alimenté par un bloc d'alimentation à courant continu homologué UL de 12 Vdc, 2A
nominal marqué LPS ou Class 2 ou par une source d’alimentation par Ethernet de 54 Vdc (PoE).
Regulatory Notices
Federal Communication Commission (FCC) – USA
This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received; including interference that may cause
undesired operation.
This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in residential installation. This equipment generates, uses, and can radiate
radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it
may cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation.
If this equipment does cause harmful interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
Consult the dealer or an experienced radio/TV technician for help.
WARNING: Any changes or modifications to this unit not expressly approved by the party responsible
for compliance could void the user’s authority to operate the equipment
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the radiator
13

and your body. This transmitter must not be co-located or operating in conjunction with any other
antenna or transmitter.
Caution: Operation of this device is restricted to indoor use only.
For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor environment.
This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules.
Industry Canada Equipment Standard for Digital Equipment (ICES)
– Canada
This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
Innovation, Science and Economic Development (ISED) – Canada
This device complies with ISED license-exempt RSS standard(s). Operation is subject to the following
two conditions: (1) this device may not cause interference, and (2) this device must accept any
interference, including interference that may cause undesired operation of the device.
Le présent appareil est conforme aux CNR d' ISED applicables aux appareils radio exempts de
licence. L'exploitation est autorisée aux deux conditions suivantes : (1) l'appareil ne doit pas produire
de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si
le brouillage est susceptible d'en compromettre le fonctionnement.
For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of
other channels is not possible.
Pour les produits disponibles aux États-Unis / Canada du marché, seul le canal 1 à 11 peuvent être
exploités. Sélection d'autres canaux n'est pas possible.
This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the radiator &
your body.
14

Cet équipement est conforme aux limites d'exposition aux rayonnements ISED établies pour un
environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de 20cm de
distance entre la source de rayonnement et votre corps.
The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the
equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point
operation as appropriate.
Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz) doit se
conformer à la limite de p.i.r.e. spécifiée pour l’exploitation point à point et non point à point, selon le
cas.
Caution: The device for the band 5150-5250 MHz is only for indoor usage to reduce potential for
harmful interference to co-channel mobile satellite systems.
Attention: Le dispositif de la bande 5150-5250 MHz est réservé à un usage intérieur afin de réduire
l'interférence nuisible potentielle aux systèmes mobiles par satellite co-canal.
This device has been designed to operate with an antenna having a maximum gain of 4.95 dBi for
2.4GHz and 5.83 dBi for 5GHz. Antenna having a higher gain is strictly prohibited per regulations of
ISED. The required antenna impedance is 50 ohms.
Under ISED regulations, this radio transmitter may only operate using an antenna of a type and
maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio interference
to other users, the antenna type and its gain should be so chosen that the equivalent isotopically
radiated power (e.i.r.p.) is not more than that necessary for successful communication.
Ce dispositif a été conçu pour fonctionner avec une antenne ayant un gain maximal de 4.95 dBi pour
2,4 GHz et 5.83 dBi pour 5GHz. Une antenne ayant un gain supérieur sont strictement interdites par la
réglementation d'ISED. L'impédance d'antenne requise est de 50 ohms.
Conformément à la réglementation d'ISED, cet émetteur radio peut fonctionner seulement avec une
antenne d’un type et d'un gain maximal (ou inférieur) approuvé pour l'émetteur par ISED. Dans le but
de réduire les risques de brouillage radioélectrique aux autres utilisateurs, il faut choisir le type
15

d'antenne et son gain de sorte que la puissance isotrope rayonnée équivalente (p.i.r.e.) ne dépasse
pas l'intensité nécessaire à l'établissement d'une communication réussie.
This radio transmitter (IC: 7280B-2507T021) has been approved by ISED to operate with the antenna
types listed below with the maximum permissible gain and required antenna impedance for each
antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum
gain indicated for that type, are strictly prohibited for use with this device.
Le présent émetteur radio (IC: 7280B-2507T021) a été approuvé par ISED pour fonctionner avec les
types d'antenne énumérés ci-dessous et ayant un gain admissible maximal et l'impédance requise
pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le gain est
supérieur au gain maximal indiqué, sont strictement interdits pour l'exploitation de l'émetteur.
This device and it's antennas(s) must not be co-located or operating in conjunction with any other
antenna or transmitter except in accordance with IC multi-transmitter product procedures.
Cet appareil et son antenne (s) ne doit pas être co-localisés ou fonctionnement en association avec une
autre antenne ou transmetteur.
Brand
Holder Quantity Antenna Type Connector
Gain (dBi)
2.4GHz 5GHz
Internal antenna model
Senao
Networks, Inc 1 PIFA IPEX 4.36 -
Senao
Networks, Inc 1 PIFA IPEX 4.95 -
Senao
Networks, Inc 1 PIFA IPEX - 5.64
Senao
Networks, Inc 1 PIFA IPEX - 5.83
Bluetooth
Senao
Networks, Inc 1 PIFA IPEX 3.67 -
16

Brand
Holder Quantity Antenna Type Connector
Gain (dBi)
2.4GHz 5GHz
External antenna model
Senao
Networks, Inc 2 Dipole RP SMAPlug 4.58 -
Senao
Networks, Inc 2 Dipole RP SMAPlug - 5.35
Bluetooth
Senao
Networks, Inc 1 PIFA IPEX 3.67 -
European Conformity (CE) - EU
This is a Class B product. In a domestic environment, this product may cause radio interference, in
which case the user may be required to take adequate measures.
The product transmits within the frequency ranges and less than or equal to the power listed below:
2412-2472MHz less than 20dBm
5180-5240MHz less than 23dBm
5260-5320MHz less than 23dBm *
5500-5700MHz less than 28dBm *
Note: * Only with DFS bands certification.
This equipment should be installed and operated with minimum distance 32cm between the radiator &
your body.
17

Simplified EU Declaration of Conformity
This declaration is only valid for Fortinet products (including, combinations of software, firmware and
hardware) provided by Fortinet or Fortinet’s authorized partners to the end customer directly for use
within the EU or countries that have implemented the EU Directives and/or spectrum regulation. Any
Fortinet products not obtained directly from Fortinet or Fortinet’s authorized partners may not comply
with EU Directives and Fortinet makes no assurances for such products.
Български
Този продукт е в съ ответствие с Директива 2014/53/ЕС.
Česky
Tento produkt je v souladu se směrnicí 2014/53/EU.
Dansk
Dette produkt er i overensstemmelse med direktiv 2014/53/EU.
Deutsch
Dieses Produkt entspricht der Richtlinie 2014/53/EU.
Eesti
See toode vastab direktiivile 2014/53/EL.
English
This product is in compliance with Directive 2014/53/EU.
Español
Este producto cumple con la Directiva 2014/53/UE.
Ελληνική
Το προϊόν α υτ ό συμμορφ ώ νετ α ι με τ ην Οδηγία 2014/53/ΕΕ.
Français
Ce produit est conforme à la Directive 2014/53/UE.
Hrvatski
Ovaj proizvod je u skladu s Direktivom 2014/53/EU.
18

Italiano
Questo prodotto è conforme alla Direttiva 2014/53/EU.
Latviski
Questo prodotto è conforme alla Direttiva 2014/53/EU.
Lietuvių
Šis gaminys atitinka direktyvą 2014/53/ES.
Malti
Dan il-prodott huwa konformi mad-Direttiva 2014/53/UE.
Magyar
Ez a termék megfelel a 2014/53/EU irányelvnek.
Nederlands
Dit product is in overeenstemming met Richtlijn 2014/53/EU.
Norsk
Dette produktet er i samsvar med direktiv 2014/53/EU.
Polski
Ten produkt jest zgodny z dyrektywą 2014/53/UE.
Português
Este produto está em conformidade com a Diretiva 2014/53/UE.
Rumunski
Acest produs este în conformitate cu Directiva 2014/53/UE.
Slovensky
Tento produkt je v súlade so smernicou 2014/53/EÚ.
Slovensko
Ta izdelek je v skladu z Direktivo 2014/53/EU.
19

Suomi
Tämä tuote on direktiivin 2014/53/EU mukainen.
Svenska
Denna produkt överensstämmer med direktiv 2014/53/EU.
Note: The full declaration of conformity for this product is available at the link below:
https://site.fortinet.com/ProductRegulatory/EU
20