Fortinet FortiAP U431F User manual

FortiAP U431F/U433F
Quick Start Guide

Screws (16)
FAP-U433F QuickStart Guide
FAP-U433F Box Includes
5.0 GHz Antennas (4)
2.4/5.0 GHz Antennas (6)
Wall/Ceiling Mount & Standard
Tile T-rail Bracket (2 Sizes)
1

FAP-U431F Box Includes
FAP-U431F QuickStart Guide
Wall/Ceiling Mount & Standard
Tile T-rail Bracket (2 Sizes)
2
Screws (16)

IMPORTANT: Supported only from FortiWLC Release 8.5.1 or later and FortiGate with FOS version 6.2.2 and later.
The FortiAP-U431F and FortiAP-U433F access points are 802.11ax, Wave 2, 4x4 MIMO, tri-radio, dual band
access points and are compliant with the IEEE 802.3at PoE specications. The access points operate with a
default TX power of +24dBm in 2.4GHz channels and +23dBm in 5.0GHz channels.
The FAP-U43xF is compatible with FortiWLC enterprise wireless LAN controllers, integrated FortiGate
enterprise rewall LAN controllers, and FortiAPCloud management platform.
This device can be wall mounted or ceiling mounted. Use the supplied hardware components to complete
installing the unit.
About FAP-U43xF
3

Installing FAP-U43xF
Follow this procedure to attach the unit to a wall or ceiling using the supplied mounting bracket.
1. Slide and attach the ceiling mount bracket to the bottom cover of the FortiAP unit.
If extra space is required to accommodate drop ceiling tiles, use the taller ceiling mount bracket.
2. Select an appropriate location, hold the device against the ceiling t-rail, and push the FortiAP unit onto
the ceiling until it snaps into place.
The unit can be removed from the bracket by pressing on the bracket tab and sliding the device out.
4
T-rail installed
Bracket attached

5
Notes:
• One standard ceiling mount bracket is included in sizes: 1.43cm (9/16in) and 2.38cm (15/16in).
• Mounting above the ceiling: FAP-U431F and FAP-U433F are UL2043 plenum rating certied.
However, mounting FAP-U433F above the ceiling is restricted to the FortiAP either facing up or
facing down; mounting FAP-U433F vertically is not allowed.
• To protect your device from unauthorized removal, use the Kensington™ Security Slot to attach a cable
lock (not included).

Antennas (Applicable for FAP-U433F only)
The FortiAP unit is a tri-radio, dual band access point. Use the 2.4/5.0 GHz antennas to access the 2.4GHz
and 5GHz radio signals and the 5.0 GHz antennas to access the 5GHz radio signals. To use all three radios
concurrently, all ten WiFi antennas are required
Installing the WiFi Antennas
1. Insert the antenna base rmly into the appropriate antenna mount.
2. Securely hand tighten the fastening collar.
3. Repeat for the remaining antennas.
6

Antennas
7
A2
5.0 GHz
A3
5.0 GHz
A6
2.4/5.0 GHz
A10
2.4/5.0 GHz
A9
2.4/5.0 GHz
A7
2.4/5.0 GHz
A5
2.4/5.0 GHz
A4
5.0 GHz
A8
2.4/5.0 GHz
A1
5.0 GHz

All 5.0 GHz antennas and 2.4/5.0 GHz antennas are vertically oriented.
AP Mounting and
Antenna Position
8
Ceiling Mounted Wall Mounted

Ports LAN1 2.5G & LAN2 1G
Ethernet Port (RJ-45)
Gigabit Ethernet port with
Power over Ethernet (PoE)
Powered Device (PD) support
Power
12V, 2.5A
Console Port (RJ-45)
Optional management
computer connection
Provides access to the
Command-Line Interface (CLI)
USB Port
9
Serial Baud Rate
115200
Reset

LED Status
10

11
5 - Bluetooth and Radio 3 scanning
No light: Radio 3 is powered o.
Green: Radio 3 and BLE scanning enabled. Blinking Green: Data Tx/Rx on Radio 3 and BLE .
Orange: Radio 3 is up. Blinking Orange: Data Tx/Rx on Radio 3.
Blue: BLE scanning enabled Blinking Blue: Data Tx/Rx on BLE.
4 - WiFi (Radio 1 and 2)
No light: Radio 1 and 2 are powered O
Blue: Radio 1 is up.
Blinking Blue: Data Tx/Rx on Radio 1.
Orange: Radio 2 is up.
Blinking Orange : Data Tx/Rx on Radio 2.
Green: Both Radio 1 and 2 are up.
Blinking Green: Data Tx/Rx on both Radio 1 and 2.
1 - Power
Steady Green: Power On
Blinking Green: Booting Up or Upgrading Firmware.
Orange: Wireless controller found and the device is not managed.
No light: Power O/Wireless controller not found
2 - LAN1 2.5Gbps 3 - LAN2 1Gbps
No light: Link Down No light: Link Down
Green: Link up. Green: Link up.
Blinking Green: Data Tx/Rx at 2.5Gbps. Blinking Green: Data Tx/Rx at 1Gps.
Blinking Orange: Data Tx/Rx at 100Mbps/1Gbps. Blinking Orange: Data Tx/Rx at 100Mbps.

Connecting
Adequate grounding must be provided to the FortiAP unit in
compliance with the local electrical code.
Caution: Do not use any PoE injectors that are not IEEE 802.3at
compliant, as they may damage your device.
1. Connect one end of the Ethernet cable into the LAN1 or LAN2 port
of the FortiAP unit.
2. Connect the other end of the Ethernet cable into your switch.
3. Connect one end of the console cable to the RJ-45 console port on
the FortiAP. Connect the other end to a management computer for
CLI access.
4. If you are not using PoE, connect the DC plug of the optional power
adapter into the DC power jack on the FortiAP unit, and then insert
the other end into an appropriate power outlet.
The power LED will light up.
12

13

To bring the FortiAP back to factory default setting, insert a pin into the reset point on the FortiAP unit
and hold on for 10 seconds. Release the pin.
On the FortiAP image, run the reload default factory command to reset the FortiAP to factory default.
14
Supported
Controller Types
FAP-U433F and FAP-U431F are compatible with FortiWLC
enterprise wireless LAN controllers, integrated FortiGate
enterprise rewall LAN controllers, and FortiAPCloud
management platform.
• If FortiWLC controller is discovered, the unit continues booting up with the default FortiWLC
image.
• If the FortiGate controller or the FortiAPCloud management platform is discovered, the unit
reboots with the FortiAP image.
For the FortiAP to discover the FortiAPCloud management platform, you need to add the unique
FortiAPCloud key labelled on the device to the FortiAPCloud. See section FortiAPCloud Deployment .
For the FortiAP to complete the FortiGate discovery, you need to authorize the FortiAP on the
FortiGate. See section FortiGate Deployment .

FortiAPCloud
Deployment
Follow these steps to complete the FortiAPCloud discovery.
1. Visit https://login.fortiapcloud.com and sign in or
create a new account.
2. Click Inventory > Import AP Key and enter the unique FortiAPCloud key, then click Submit.
Note: The FortiAPCloud key is located on the back of your FortiAP unit.
3. Deploy the FortiAP to an existing AP network, or create a new AP network, then click Submit.
15

4. Follow the prompts to associate the FortiAP device to an SSID.
5. Connect your FortiAP to an Internet connection. This can be a modem or another source of
Internet connectivity.
Congure the discovered FortiAP.
16

FortiGate Deployment
To complete the FortiGate controller discovery process, you
need to authorize the FortiAP on FortiGate.
192.168.1.2 is the default FortiAP IP address when it boots
up with the FortiAP image managed by FortiGate.
17

The FortiAP unit is designed to require no conguration in most
networks. Zero conguration mode works if the unit is on the same
layer-2 network and subnet as the FortiWLC, or if the unit is on the
same layer-3 network and subnet as the FortiGate controller or
FortiAPCloud management platform.
If the FortiAP wireless controller’s IP address cannot be determined
using Zero Conguration mode, or if the network uses static IP
addresses, it can be congured to use a static IP address.
To enable the FortiAP with a static IP address:
Zero
Conguration
18

To enable the FortiAP using Zero Conguration:
1. After connecting the FortiAP unit as described in the previous
chapter, the unit goes through its boot procedure and requests
an IP address from the DHCP server.
2. If the IP address is retrieved successfully, the FortiAP enters
discovery mode to locate a Controller.
The discovery modes for the FortWLC controller are:
• DHCP option 43
• DHCP option 138
• DNS
• Static Controller IP address
The discovery modes for FortiGate controller are:
• DHCP option 138
• DNS
• Multicast
• Broadcast
• Static Controller IP address
Zero
Conguration
19